Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread Paul Libbrecht
James, I personally think it would be a really good idea. But I am not a browser implementor. Overall, I agree with you that writing to the clipboard, only within a click or key event processing maybe?, is likely to be a non-concern on privacy. I would love to hear others' feedback. Is

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread Ryosuke Niwa
On Jul 12, 2013, at 12:57 PM, James Greene james.m.gre...@gmail.com wrote: It appears that the only way to trigger a `copy` event programmatically is to use `document.execCommand('copy')`, which most browsers prevent:

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread Anne van Kesteren
On Jul 12, 2013, at 12:57 PM, James Greene james.m.gre...@gmail.com wrote: It appears that the only way to trigger a `copy` event programmatically is to use `document.execCommand('copy')`, which most browsers prevent:

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread James Greene
Paul: Looking at TimBL's 2010 post, I feel like it's from a slightly era in the web's lifetime. Looking at this problem again with today's web, I'd rather see the ability for clipboard injection become a standard available API and rather create a browser extension to *prevent* it rather than to

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread James Greene
Hallvord — I have also long agreed that clipboard poisoning is rarely that big of an issue so long as we're not enabling programmatic reading of the clipboard during a copy event (which I would agree is completely unnecessary). As you said, since Flash is already an available option to do this

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread James Greene
Ryosuke Anne — Agreed with Anne, leaving it up to the browser vendors an agreed upon standard (or at least marching direction) means zero progress. Sincerely, James Greene On Wed, Jul 24, 2013 at 7:32 PM, Anne van Kesteren ann...@annevk.nl wrote: On Jul 12, 2013, at 12:57 PM, James

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread James Greene
Oh, and for the record, the analytics company discussed in the Tim BL's post could've really still manage to do what they were doing without any copy events at all, it just would've been less accurate. For example, they could've just as easily added event handlers for right-click (contextmenu) or

Re: Clipboard API: Enable `copy` event simulation with user's express permission (domain-wide)?

2013-07-24 Thread James Greene
*Correction:* leaving it up to the browser vendors WITHOUT an agreed upon standard (or at least marching direction) means zero progress. Sincerely, James Greene On Wed, Jul 24, 2013 at 8:11 PM, James Greene james.m.gre...@gmail.comwrote: Ryosuke Anne — Agreed with Anne, leaving it up