Opened 21 months ago

#25166 new defect

Clipboard may be cleared or modified by websites

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-proxy-bypass
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Things like document.execCommand('copy') allows websites to mess with the clipboard. We might want to think to either warn users when this happens or just disable that feature by flipping the dom.allow_cut_copy preference. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1012662 for the original implementation and discussion about exposing the preference.

Thanks to xiaoyinl who reported that issue in our bug bounty program.

Child Tickets

Change History (0)

Note: See TracTickets for help on using tickets.