Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Paul Libbrecht
On 16 sept. 2014, at 02:36, Brian Matthews (brmatthe) brmat...@cisco.com wrote: And again what about the naïve user that doesn’t even know what an extension is or read somewhere that they’re “bad”, or will even understand what happened when their wife/husband/parent/child finds

[Bug 26815] New: [Shadow]:

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=26815 Bug ID: 26815 Summary: [Shadow]: Product: WebAppsWG Version: unspecified Hardware: All OS: All Status: NEW Severity: minor Priority: P2

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread Hallvord R. M. Steen
Wouldn't it be better for the user if a consistent policy were applied across the board when handling their data? Not if the average user can't understand the policy that is applied, and the way it applies to what they are trying to achieve. Proper handling of the data shifts the onus to

Re: PSA: Extensible Web Summit in Berlin September 11

2014-09-16 Thread Arthur Barstow
On 7/9/14 4:15 PM, Arthur Barstow wrote: [ Bcc: public-pointer-events ] FYI, Robin reports the availability of minutes from the September 11 EWS in Berlin: [[ as you may know, last week the second edition of the Extensible Web Summit took place in Berlin. It was fun an interesting. The

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread James M. Greene
We did some user research on this feature when we were building our most recent flagship product a few years back. Our users' reactions to a sane site enhancing their clipboard data were unanimously delighted rather than upset/offended/horrified. As Hallvord said, sites have been able to do this

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread Jeffrey Walton
On Mon, Sep 15, 2014 at 9:06 PM, Daniel Cheng dch...@google.com wrote: Again, what are you trying to defend against? Why is it beneficial to try to block this? At minimum, its information leakage. If the data has value such that at least one leg requires HTTPS, then traversing some legs with

Re: PSA: publishing new WD of Clipboard API and events on Sept 18

2014-09-16 Thread James M. Greene
Regardless of protocol, a site that contains sensitive data should be implemented such that it doesn't use this API nor include any unverified 3rd party libraries/extension that may. They should also only utilize a feature such as this in obvious ways (i.e. by having the user click on a copy

[Bug 13952] Specify selection change events

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=13952 Ryosuke Niwa rn...@webkit.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 24083] Window.getSelection() and HTMLDocument.getSelection() should return a nullable

2014-09-16 Thread bugzilla
https://www.w3.org/Bugs/Public/show_bug.cgi?id=24083 Ryosuke Niwa rn...@webkit.org changed: What|Removed |Added Status|NEW |RESOLVED

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Brian Matthews (brmatthe)
a page can wipe out my entire clipboard history if I move my mouse over it. Not quite :) Check the list of events - mousemove isn't included: http://www.w3.org/TR/html5/browsers.html#allowed-to-show-a-popup I was just going by where I¹ve seen pages pop up windows, and I¹ve seen pages that pop

Re: [clipboard] Semi-Trusted Events Alternative

2014-09-16 Thread Brian Matthews (brmatthe)
On 9/16/14, 5:22 AM, James M. Greene james.m.gre...@gmail.commailto:james.m.gre...@gmail.com wrote: We did some user research on this feature when we were building our most recent flagship product a few years back. Our users' reactions to a sane site enhancing their clipboard data were

innerText spec

2014-09-16 Thread Ryosuke Niwa
Hi, Is either one of you working on innerText specification? (http://lists.w3.org/Archives/Public/www-archive/2014Mar/0008.html) I think we need it for the selection API specification because the concept of being “visually equivalent” and selection.toString need to be defined in terms of it.

Re: innerText spec

2014-09-16 Thread Ian Hickson
On Tue, 16 Sep 2014, Ryosuke Niwa wrote: Is either one of you working on innerText specification? (http://lists.w3.org/Archives/Public/www-archive/2014Mar/0008.html) I think we need it for the selection API specification because the concept of being “visually equivalent” and

IndieUI Teleconference Agenda; 17 September at 21:00Z for 60 minutes

2014-09-16 Thread Janina Sajka
Cross-posting as before ... What: IndieUI Task Force Teleconference When: Wednesday 17 September 2:00 PMSan Francisco -- U.S. Pacific (Daylight) Time (PDT: UTC -7) 4:00 PMAustin -- U.S. Central (Daylight) Time (CDT: UTC -5) 5:00 PM