News for hackers. Stuff that matters.

A comment on Android permissions and hypocrisy. Parent comment

Re:Android permissions and hypocrisy by emodendroket on Monday January 23, 2017 @08:57AM (#13462152)
Oh, I see. Yeah, Flash is a different story, I guess, but for JavaScript you can't get at the clipboard unless someone pastes in all the browsers I'm aware of.
[ Parent | on HN ]
Re:Android permissions and hypocrisy by cyphar on Monday January 23, 2017 @10:59AM (#13463050)
There's a library for accessing the clipboard within JS[1]. As far as I can tell, the HTML5 APIs for it are designed to stop this from being used to steal your clipboard but I somewhat doubt its effectiveness.

[1]: https://clipboardjs.com/

[ Parent | on HN ]
Re:Android permissions and hypocrisy by emodendroket on Monday January 23, 2017 @11:39AM (#13463430)
That seems to let you write to the clipboard, not read it.
[ Parent | on HN ]
Re:Android permissions and hypocrisy by cyphar on Monday January 23, 2017 @12:00PM (#13463610)
The API used (document.execCommand) supports "paste" which lets you paste the current contents of the clipboard. However, it doesn't appear to work in my version of Chromium.
[ Parent | on HN ]