News for hackers. Stuff that matters.

A comment on Chrome allows websites to write to the clipboard without the user’s permission. Parent comment

Re:Chrome allows websites to write to the clipboard without ... by devmunchies on Saturday August 27, 2022 @04:31AM (#32617022)
it'd be trivial to trick users to copy the wrong text with only CSS.
[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by HWR_14 on Sunday August 28, 2022 @02:59PM (#32630977)
Wait, how?
[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by devmunchies on Sunday August 28, 2022 @05:59PM (#32632497)
Make a layer that isn’t visible with “opacity: 0” that sits in front of the visible text. A user copies the invisible text instead.

Or conversely, make the visible text “pointer-events: none” and it sits in front of the dangerous text.

[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by HWR_14 on Monday August 29, 2022 @12:16AM (#32634750)
Both of those make sense.
[ Parent | on HN ]