3 ms·

This is indeed a nice argument. Sometimes I am doing something on the CLI and go back to the terminal and paste a text I copied from somewhere. If the text is

by henvic 11y ago

This is indeed a nice argument. Sometimes I am doing something on the CLI and go back to the terminal and paste a text I copied from somewhere. If the text is multiline my terminal will consume the lines without requiring an extra 'enter / return' key press. Another possibility is copying something to web mail client without noticing there's something suspicious about it (JS isn't the concern here anymore nowadays, but loading stuff like images is a privacy concern). However, this issue MUST be fixed at browser level. And when used without destroying user expectations / UX, this plugin is useful. Malicious attacks are going to happen anyways if the browser permit such action to happen, so don't blame the plugin or the plugin writer. The browsers are broken. Ask the major browser developers to either never allow it to happen (like Safari does) or ask them to ask for permission (like for webcams) or add a confirmation modal.

pdkl95 11y ago
re: browser support (which is where this problem should be fixed) A trivial compromise that would be even easier to use than the current javascript/selection stuff would be a "copy to clipboard" variant of the <button> tag. Something like this should satisfy the use-cases where this clipboard nonsense is occasionally useful: <form> <input name="copy_souce" type="text" value="xyzzy" /> <button type="clipboard" value="copy_source" name="Copy To Clipboard" /> </form> This wouldn't require any Javascript, and leaves the clipboard entirely under the control of the user where it belongs. This could even be extended to allow copying of the various types of input tags, and if you wanted to get fancy, the button could reference an #id and copy that element's textContent (or innerHTML).
- stephenr 11y ago
  Or people could .. You know... Use their platforms existing copy functionality. I know it's only existed on desktop computers since the Apple Lisa, and 30 years isn't very long for people to grasp the concept of copy and paste without a button to do it, but I have faith in people.
- henvic 11y ago
  This button couldn't be customized, otherwise it's useless as someone could easily get away with hiding it / showing only a small portion of it where someone could click without even noticing / etc. Maybe a small modal-like confirmation that can be placed anywhere on the viewport and is actually on top of everything natively (like Safari's copy/paste on iOS). Of course, this modal-like confirmation must not be customized or its effect is useless. Or let's just forget entirely and remove the functionality from the browsers.

by henvic 11y ago

pdkl95 11y ago

re: browser support (which is where this problem should be fixed) A trivial compromise that would be even easier to use than the current javascript/selection stuff would be a "copy to clipboard" variant of the <button> tag. Something like this should satisfy the use-cases where this clipboard nonsense is occasionally useful: <form> <input name="copy_souce" type="text" value="xyzzy" /> <button type="clipboard" value="copy_source" name="Copy To Clipboard" /> </form> This wouldn't require any Javascript, and leaves the clipboard entirely under the control of the user where it belongs. This could even be extended to allow copying of the various types of input tags, and if you wanted to get fancy, the button could reference an #id and copy that element's textContent (or innerHTML).

stephenr 11y ago
Or people could .. You know... Use their platforms existing copy functionality. I know it's only existed on desktop computers since the Apple Lisa, and 30 years isn't very long for people to grasp the concept of copy and paste without a button to do it, but I have faith in people.
henvic 11y ago
This button couldn't be customized, otherwise it's useless as someone could easily get away with hiding it / showing only a small portion of it where someone could click without even noticing / etc. Maybe a small modal-like confirmation that can be placed anywhere on the viewport and is actually on top of everything natively (like Safari's copy/paste on iOS). Of course, this modal-like confirmation must not be customized or its effect is useless. Or let's just forget entirely and remove the functionality from the browsers.