4 ms·
This particular attack is actually not a concern if you're using fish (or zsh for that matter I think), as it will not execute pasted content without an additio
by westernpopular 3y ago
This particular attack is actually not a concern if you're using fish (or zsh for that matter I think), as it will not execute pasted content without an additional pressing of the enter key.
- account42 3y agoIt's still a concern because there will be users reflexively pressing enter without checking what they pasted if it's the expected value most of the time. Meanwhile there is zero benefit for letting websites manipulate the clipboard or intercept basic browser interactions. This might make sense for applications but that's just another argument why those shouldn't be forced into the same browser as websites.
- fruitreunion1 3y agoYeah, I'm disappointed there's no permission toggle so that I could have javascript-based clipboard setting behind a prompt on most websites and have exceptions for others.
- egberts1 3y agoSound like an enhancement feature request for NoScript or UBlock Origin, no?
- fruitreunion1 3y agoBash also buffers pasted content.