Intent to ship: navigator.clipboard.read() and navigator.clipboard.write()

[Edgar Chen]

They have been enabled on Nightly and early beta since Firefox 122 [1].

As of Firefox 127, I intend to enable clipboard.read()/write() by default on all channels.

Bug to enable by default: https://bugzilla.mozilla.org/show_bug.cgi?id=1887845.

Standard: https://w3c.github.io/clipboard-apis

This feature was previously discussed in this “Intent to prototype” thread: https://groups.google.com/a/mozilla.org/g/dev-platform/c/doxNXSEFtEE/m/DEeKdaZuAQAJ

--

Best Regards,

Edgar Chen

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1809106

[Martin Thomson]

Hi Edgar,

What is the status with respect to the clipboard-read permission?  The spec is not very clear on this point and the explainer points to a (resoved) bug regarding the permission.

I have something of a strong aversion to sites being given access to my clipboard, except under very tight constraints.  That said, I think that the algorithm in https://w3c.github.io/clipboard-apis/#read-permission seems about right (and is consistent with what I understand existing behavior to be).  Are we limiting access to when there is a transient "Paste" activation?

--
You received this message because you are subscribed to the Google Groups "dev-pl...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dev-platform...@mozilla.org.
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAN1gQc7ZDKZi1h8JG3OCsx-FxjPPnn_5sNLJ2tvH9MstDKi-LA%40mail.gmail.com.

[Edgar Chen]

Hi Martin:

> Are we limiting access to when there is a transient "Paste" activation?

We only allow a page to read from the system clipboard when there is a valid user transient activation. And if the content in the system clipboard isn't originated from the same-origin page, a paste context menu will be prompted to the user, who would need to click it explicitly to allow the access.

--

Best regards,

Edgar Chen

On Wed, May 1, 2024, 01:37 Martin Thomson <m...@mozilla.com> wrote:

Hi Edgar,

What is the status with respect to the clipboard-read permission?  The spec is not very clear on this point and the explainer points to a (resoved) bug regarding the permission.

I have something of a strong aversion to sites being given access to my clipboard, except under very tight constraints.  That said, I think that the algorithm in https://w3c.github.io/clipboard-apis/#read-permission seems about right (and is consistent with what I understand existing behavior to be).  

[Mike Kaply]

It looks like Chrome browsers have implemented an explicit clipboard permission.

Are we planning to do that at some point?

It would make it a lot easier for enterprises to enable/disable clipboard on specific sites.

Mike

To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAN1gQc4ATuDFjqM1yCdB9Zw100qu9WYkpnnhqhUb0kEo%2BigD9Q%40mail.gmail.com.

[Martin Thomson]

I hope that we do not implement an explicit request for clipboard read permission.  Maybe I shouldn't be so paranoid, but my own clipboard is routinely home to all sorts of secrets.