3 ms·
I was shocked to find out that firefox enabled websites to access the clipboard sometime in the last five years or so. .. and I'm left stressed out that I could
by nullc 6y ago
I was shocked to find out that firefox enabled websites to access the clipboard sometime in the last five years or so. .. and I'm left stressed out that I could have had important passwords or key stolen this way.
This can be disabled by setting a preference: https://www.ghacks.net/2014/01/08/block-websites-reading-modifying-clipboard-contents-firefox/ https://www.ghacks.net/2014/01/08/block-websites-reading-mod...
- lucasmullens 6y agoFirefox prompts for your permission to read from the clipboard: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Interact_with_the_clipboard https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... But I'm not sure if that's always been the case.
- gruez 6y agothat's for addons, not websites
- gruez 6y agoI don't think that site's accurate. I searched around and there seems to be two ways of reading clipboard contents: making a fake dom element and waiting for the user to paste, or to use the async clipboard api. The first doesn't seem abusable because it requires you to actually paste something. The second doesn't seem to be supported by firefox, at least according to this demo: https://googlechrome.github.io/samples/async-clipboard/ https://googlechrome.github.io/samples/async-clipboard/.