4 ms·
Being able to put things on the clipboard programmatically is a really useful feature. It's actually quite sad that you need flash to do this reliably. Disabli
by boucher 15y ago
Being able to put things on the clipboard programmatically is a really useful feature. It's actually quite sad that you need flash to do this reliably.
Disabling javascript: urls in the address bar seems like a much better way to mitigate this problem.
- Me1000 15y agoWhile I agree being able to access the clipboard without flash would be very useful, I don't think disabling javascript URLs are a good idea either... A lot of very interesting and useful things can be done with bookmarklets. I suppose given the tradeoffs I'd choose clipboard access over bookmarklets though.
- davej 15y agoYou're not disabling bookmarklets by preventing people from copy/pasting javascript into their address bar. Bookmarklets still work they just can't be executed directly from the address bar.
- Too 15y agoReplace instructions with: 1. Drag this icon to your favorites bar. 2. Click it. Might not have the same turnover as the paste-trick but will definitely catch at least 50% of those the other method does. Though IE will warn the user that this is dangerous in step 1 but other browsers doesn't. Bookmarklets are good but the security model is very fragile. A new concept of widgets has to be introduced in browsers. Kindof like IE8's "web-snippets" but with more power and some sandboxed interface between the widget and the current website. For power users and trusted widgets you should be able to disable the barriers completely to get the same functionality as today, but as opposed to today, this should require a user warning at least on bookmarklet install.