News for hackers. Stuff that matters.

A comment on Chrome allows websites to write to the clipboard without the user’s permission. Parent comment

Re:Chrome allows websites to write to the clipboard without ... by denton-scratch on Saturday August 27, 2022 @09:38AM (#32618840)
But why does a rich text editor need to talk to a website?
[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by LocalH on Saturday August 27, 2022 @09:51AM (#32619010)
What if the rich text editor and the website are the same thing? What if the rich text editor is part of a larger tool that is the website?
[ Parent | on HN ]
Re:Chrome allows websites to write to the clipboard without ... by denton-scratch on Saturday August 27, 2022 @10:16AM (#32619268)
Well, I'm not sure what you're waving at. If the website is nothing more than a RTE, then it's better (and safer) to do it in the browser. If the RTE is just part of the website, then that's a part that's better done in the browser.

Perhaps you want a RTE that doesn't depend on JS. I think that's a reasonable thing to want; but if you normally browse with JS switched off, then running into a working RTE is at least going to violate the Principle of Least Surprise.

[ Parent | on HN ]