3 ms·
So, login form can just clear clipboard instead in onsubmit() handler.
by lisivka 10y ago
So, login form can just clear clipboard instead in onsubmit() handler.
- justaboy21 10y agoYou can't alter the clipboard from JS (you can on browsers that support the execCommand API but still).
- danjc 10y agoThat's an interesting idea actually. My first response was that you can't freely interact with the clipboard but you can set it provided you do it in response to a js event so in theory that is possible. The only problem is that you'd need to be sure the clipboard did actually contain the password because of course you can't read it. I guess you can log whether onpaste fired and then if the login button is clicked with a second or two, clear the clipboard.
- danjc 10y agoAnd by 'clear', I mean add a textbox, set its value to an explanatory message '{app} cleared the clipboard because it contained your password' and then execCommand on it.
- happyslobro 10y agoHopefully there is nothing important in the clipbkard, like some data that the user will attempt to submit a second time after logging in. It sounded like a good idea at first, but now I want my +1 back :p
- thameera 10y agoOf course. The implementation should check if the clipboard content is equal to the entered password.