News for hackers. Stuff that matters.

A comment on Google Removed ClearURLs Extension from Chrome Web Store.

Re:Google Removed ClearURLs Extension from Chrome Web Store by theseanl on Wednesday March 24, 2021 @06:12AM (#26565362)
I did found that the codebase does not seem to be using any `browser.clipboard` API, so `clipboardWrite` permission seems to be unnecessary. According to [MDN](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...), `browser.clipboard` API mainly exists to enable extensions to write image contents to clipboards, and all the ClearURL needs is writing texts. Also, [another MDN page on clipboard interactions](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...) states that extensions do not need `clipboardWrite` permissions to write to clipboards, e.g. by using `document.execCommand('copy')`.

Hopefully, removing this permission could help getting the extension restored.

[ Parent | on HN ]
Re:Google Removed ClearURLs Extension from Chrome Web Store by Nicksil on Wednesday March 24, 2021 @06:56AM (#26565614)
It seems there's a line which requires such permission:

https://github.com/ClearURLs/Addon/blob/master/external_js/c...

    document.execCommand("copy");
I personally do not know, just going by what's stated within the URL in the adjoining comment (https://github.com/mdn/webextensions-examples/tree/master/co...).
[ Parent | on HN ]
Re:Google Removed ClearURLs Extension from Chrome Web Store by theseanl on Wednesday March 24, 2021 @07:12AM (#26565706)
Confusingly, according to the MDN document I linked, that permission is not needed.

Clipboard APIs are in general pretty permissive in writing, any websites can write anything to the clipboard without requesting any permission, if it's done within like 1000ms or so from user interaction. So you don't even need an extension to write to clipboard.

[ Parent | on HN ]