News for hackers. Stuff that matters.

A comment on Chrome allows websites to write to the clipboard without the user’s permission. Parent comment

Re:Chrome allows websites to write to the clipboard without ... by ndriscoll on Friday August 26, 2022 @11:12PM (#32615267)
> Don't you hate when news sites add a "- from XYZ" to your clipboard? That shouldn't be possible.

I opened a bug with chromium when I first encountered that behavior ~10 years ago since it was an obvious security and privacy concern to me. Needless to say, the chromium devs didn't think it's an issue.

You would think browsers would ask permission for sites to do things like modify your clipboard, see when you copy/paste, track your mouse movements and text selections, etc. but google obviously isn't going to care about protecting the user from such things.

[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by chalupa-man on Monday August 29, 2022 @08:38PM (#32645358)
You don't need to modify the clipboard to do that, news sites were doing it long before the clipboard API existed. It's usually done with CSS, abusing display properties, positioning, font size, etc to make attributions a non-visible but still copied part of the text.
[ Parent | on HN ]