Re: Clipboard API: remove dangerous formats from mandatory data types

2015-06-10 Thread Anne van Kesteren
On Wed, Jun 10, 2015 at 2:55 PM, Arthur Barstow art.bars...@gmail.com wrote: Are you suggesting/proposing new normative requirement(s) in the spec proper and/or new text in the security/privacy considerations [1]? https://w3c.github.io/clipboard-apis/#other-security-and-privacy-considerations

Re: Clipboard API: remove dangerous formats from mandatory data types

2015-06-10 Thread Arthur Barstow
On 6/10/15 5:32 AM, Anne van Kesteren wrote: On Wed, Jun 10, 2015 at 11:22 AM, Hallvord Reiar Michaelsen Steen hst...@mozilla.com wrote: Developing web browsers and their specs means paranoia should be part of your job description. It is a concern and I'm not sure how to solve it. Well we

Re: Clipboard API: remove dangerous formats from mandatory data types

2015-06-10 Thread Hallvord Reiar Michaelsen Steen
On Wed, Jun 10, 2015 at 1:23 AM, Ashley Gullen ash...@scirra.com wrote: The browser could copy a terminal command to wipe the disk, and the user could run it. Or copy a URL to a web page that has a known security exploit, and then the user pastes it in to the address bar. Maybe we shouldn't

Re: Clipboard API: remove dangerous formats from mandatory data types

2015-06-10 Thread Anne van Kesteren
On Wed, Jun 10, 2015 at 11:22 AM, Hallvord Reiar Michaelsen Steen hst...@mozilla.com wrote: Developing web browsers and their specs means paranoia should be part of your job description. It is a concern and I'm not sure how to solve it. Well we should be able to allow some things here. Either

[Bug 25791] [new feature] Provide a way to opt out of authentication dialogs

2015-06-10 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=25791 Anne ann...@annevk.nl changed: What|Removed |Added Status|NEW |RESOLVED

Re: [clipboard API] platform integration stuff - in spec or out of scope?

2015-06-10 Thread James M. Greene
Any follow-up on this? Sincerely, James Greene On Fri, Feb 13, 2015 at 1:46 PM, Ben Peters ben.pet...@microsoft.com wrote: I agree with James. The reason to have it in the list is to have a normalized name for it (instead of worrying about platform specific clipboard types). As long as

[TPAC2015] Registration is now open for Oct 26-30 meeting week; deadline October 7

2015-06-10 Thread Arthur Barstow
Registration is now open for the October 26-30 Technical Plenary and all Working Group meeting week [TPAC], this year in Sapporo Japan: https://www.w3.org/2002/09/wbs/35125/TPAC2015/ WebApps (the entire group) will meet on Monday and Tuesday (October 26 and 27). Registration for WebApps'