Re: [clipboard] Add RTF to the "mandatory data types" list?

2016-06-13 Thread Hallvord Reiar Michaelsen Steen
On Mon, Apr 20, 2015 at 11:01 PM James M. Greene wrote: >> That behavior is really all I wanted, i.e. "don't let the browser >> discard/ignore valid RTF clipboard data". On Wed, May 6, 2015 at 8:18 PM, Daniel Cheng wrote: > I don't think I would feel comfortable with allowing web pages to place

Re: [clipboard] Add RTF to the "mandatory data types" list?

2015-05-06 Thread Daniel Cheng
I don't think I would feel comfortable with allowing web pages to place unsanitized RTF in the system clipboard. This would allow webapps to trigger exploits such as CVE-2014-1761. Daniel On Mon, Apr 20, 2015 at 11:01 PM James M. Greene wrote: > Hallvord -- > > That behavior is really all I wan

Re: [clipboard] Add RTF to the "mandatory data types" list?

2015-04-20 Thread James M. Greene
Hallvord -- That behavior is really all I wanted, i.e. "don't let the browser discard/ignore valid RTF clipboard data". I would also echo Paul's thoughts: this sounds good but is there any OS/browser-level sanitization process necessary? I would be curious to hear from Ben if Microsoft already h

Re: [clipboard] Add RTF to the "mandatory data types" list?

2015-04-20 Thread Paul Libbrecht
On 20/04/15 22:11, Hallvord Reiar Michaelsen Steen wrote: > Would it be a possible compromise to let a script describe data as > RTF, and then put said data on the clipboard with the OS's correct RTF > data type labelling? And vice versa, if the script asks for RTF give > it any RTF contents from

Re: [clipboard] Add RTF to the "mandatory data types" list?

2015-04-20 Thread Hallvord Reiar Michaelsen Steen
I assume that mandating all engines have built-in RTF parsers/converters to translate back and forth between RTF and HTML is going too far.. Apparently IE did / does just that, but even so it seems like RTF is generally fading away. Would it be a possible compromise to let a script describe data a

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-20 Thread James M. Greene
On Aug 20, 2014 4:19 AM, "Daniel Cheng" wrote: > > On Tue, Aug 19, 2014 at 3:36 AM, Hallvord R. M. Steen wrote: > >> I don't have "input" as such, but I have a few questions: >> Is there any widely used software that writes RTF data to the system clipboard but *not* HTML? > > I'm curious about th

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-20 Thread Daniel Cheng
Right now, the default action for copy/cut also populates text/plain on the clipboard if you're copying HTML (I don't think the spec explicitly mentions this, but I'm pretty sure this is how most browsers behave). Given the current discussion, it seems expected that the browser will automatically

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-19 Thread Karl Dubost
Le 19 août 2014 à 19:36, Hallvord R. M. Steen a écrit : > If there's RTF on the clipboard and you try pasting into a rich text editing > element, does any browser convert RTF to HTML to preserve the formatting? On MacOSX Test 1: Copy styled text with a link in a Web page (grey and pink text,

RE: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-19 Thread Ben Peters
> From: Ben Peters > > On Tue, Aug 19, 2014 at 10:08 AM, Daniel Cheng > wrote: > > > > On Tue, Aug 19, 2014 at 3:36 AM, Hallvord R. M. Steen > wrote: > >> > >> > Does anyone else have input for/against this? > >> > >> Conceptually, I guess RTF sort of covers the same use cases as HTML. That > do

RE: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-19 Thread Ben Peters
On Tue, Aug 19, 2014 at 10:08 AM, Daniel Cheng wrote: > > On Tue, Aug 19, 2014 at 3:36 AM, Hallvord R. M. Steen > wrote: >> >> > Does anyone else have input for/against this? >> >> Conceptually, I guess RTF sort of covers the same use cases as HTML. That >> doesn't necessarily mean we should n

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-19 Thread Daniel Cheng
On Tue, Aug 19, 2014 at 3:36 AM, Hallvord R. M. Steen wrote: > > Does anyone else have input for/against this? > > Conceptually, I guess RTF sort of covers the same use cases as HTML. That > doesn't necessarily mean we should not add it. > > I don't have "input" as such, but I have a few question

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-19 Thread Hallvord R. M. Steen
> Does anyone else have input for/against this? Conceptually, I guess RTF sort of covers the same use cases as HTML. That doesn't necessarily mean we should not add it. I don't have "input" as such, but I have a few questions: Is there any widely used software that writes RTF data to the system

Re: [clipboard] Add RTF to the "mandatory data types" list?

2014-08-18 Thread James M. Greene
Does anyone else have input for/against this? Please chime in. Thanks! Sincerely, James Greene On Thu, Oct 17, 2013 at 6:57 AM, James Greene wrote: > Oh, and I should also mention that the Flash Player clipboard (which we > are trying to kill) supports plain text, HTML, and RTF, as well a

Re: [clipboard] Add RTF to the "mandatory data types" list?

2013-10-17 Thread James Greene
Oh, and I should also mention that the Flash Player clipboard (which we are trying to kill) supports plain text, HTML, and RTF, as well as custom "application-defined" data types. http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/desktop/Clipboard.html On Oct 17, 2013 5:44 A