News for hackers. Stuff that matters.
Re:Firefox 85 by gnud on Tuesday January 26, 2021 @11:27AM (#25917670)
> Websites should not have access to my clipboard.

Being able to take an image from the web page and place it on the clipboard is not 'the website having access to my clipboard'. It's the _browser_ having access.

Going in the reverse direction, placing data from the clipboard into the web page, is more tricky, but Firefox already does a good job of blocking clipboard accesses unless they're the direct result of user action (keyboard shortcut or button press).

Re:Firefox 85 by sudosysgen on Tuesday January 26, 2021 @11:37AM (#25917829)
You know that you can just copy an image to the clipboard on Firefox yourself, right? Right click, copy image.

The question is whether the website should be able to push images to the clipboard by itself, which it shouldn't. Firefox already supports doing what you're talking about.

Re:Firefox 85 by franga2000 on Tuesday January 26, 2021 @03:39PM (#25920781)
The point is when the image is not an image. Maybe it's being drawn on a canvas, or composited with multiple layers, or you want only a part of it (all of these apply to Photopea, I believe).

I don't like the way clipboard access is handled in browsers either, but the fact remains that if I'm using an in-browser image editor, select a part of the image and press CTRL+C, I want that portion of the image in my clipboard. How it gets there is an implementation detail that the average user doesn't and, if it doesn't affect security/privacy, shouldn't have to care about. And since it's write-only, there's no security/privacy concern.