Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Note that clever timing could get the "evil text" in your clipboard between checking in a text editor and pasting into the terminal. Hard to time correctly, but not impossible.


If you're taking that step, then after you paste into the clean room, you copy out of the clean room.


At first I thought "I don't do this; it's never seemed necessary", but actually, I think I do. Years of copying to a plain text editor to strip formatting have conditioned the behavior.


Yeah, I started to copy through a text box (usually the Windows Run (Win+R) box, which isn't exactly safe now that I think of it...) to strip formatting some time ago. It's pretty much necessary whenever you want to paste anything into GMail web interface. The web is getting more ridiculous every day...


ctrl+shift+v removes formatting directly when pasting


To solve this, browsers should probably disallow modifying the clipboard after a certain time period from the event. Eg. 500ms.


FTFY:

To solve this, browsers should probably disallow modifying the clipboard .


That would probably break a lot of WYSIWYG-like editors.


Touche. Then maybe it should be like location you opt-in per domain, as another poster said in this discussion.


They do. Browsers only let you intercept and tweak existing clipboard events.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: