5 ms·

Note that clever timing could get the "evil text" in your clipboard between checking in a text editor and pasting into the terminal. Hard to time correctly, but

by nadaviv 10y ago

Note that clever timing could get the "evil text" in your clipboard between checking in a text editor and pasting into the terminal. Hard to time correctly, but not impossible.

rbut 10y ago
To solve this, browsers should probably disallow modifying the clipboard after a certain time period from the event. Eg. 500ms.
- bbcbasic 10y ago
  FTFY: To solve this, browsers should probably disallow modifying the clipboard .
  - Cthulhu_ 10y ago
    That would probably break a lot of WYSIWYG-like editors.
    - bbcbasic 10y ago
      Touche. Then maybe it should be like location you opt-in per domain, as another poster said in this discussion.
- Manishearth 10y ago
  They do. Browsers only let you intercept and tweak existing clipboard events.
danielweber 10y ago
If you're taking that step, then after you paste into the clean room, you copy out of the clean room.
- joombaga 10y ago
  At first I thought "I don't do this; it's never seemed necessary", but actually, I think I do. Years of copying to a plain text editor to strip formatting have conditioned the behavior.
  - TeMPOraL 10y ago
    Yeah, I started to copy through a text box (usually the Windows Run (Win+R) box, which isn't exactly safe now that I think of it...) to strip formatting some time ago. It's pretty much necessary whenever you want to paste anything into GMail web interface. The web is getting more ridiculous every day...
    - dsptri 10y ago
      ctrl+shift+v removes formatting directly when pasting