Isn't this like a huge security risk?

mrec · on July 14, 2015

Why? Copy FROM clipboard would be, sure. Copy TO clipboard... OK, I can come up with scenarios where it'd be a problem, but they're pretty far-fetched.

Crito · on July 14, 2015

Well there are attacks in the vein of this: https://thejh.net/misc/website-terminal-copy-paste

gsnedders · on July 14, 2015

Run a timer overwriting your clipboard every 10ms. Prevent you from copying anything off a webpage and instead replacing it with a copyright notice. Etc., etc., etc.

cpeterso · on July 14, 2015

Flash has offered these same clipboard APIs for years and these clipboard "attacks" have never been a problem before. I don't see how replacing Flash clipboard APIs with HTML clipboard APIs will change web developers' behavior.

realityking · on July 14, 2015

There's a permission prompt for first use and I think Mozilla considers making it https only.