fanglingsu / vimb

Vimb - the vim like browser is a webkit based web browser that behaves like the vimperator plugin for the firefox and usage paradigms from the great editor vim. The goal of vimb is to build a completely keyboard-driven, efficient and pleasurable browsing-experience.
https://fanglingsu.github.io/vimb/
GNU General Public License v3.0
1.33k stars 99 forks source link

`javascript-can-access-clipboard=false` doesn't stop sites from modifying the clipboard contents #757

Open falsifian opened 7 months ago

falsifian commented 7 months ago

Steps to reproduce

In ~/.config/vimb/config add set javascript-can-access-clipboard=false

Go to a Stack Overflow page, click a "Share" button, and click "Copy link"

Expected behaviour

My clipboard is unaffected.

Actual behaviour

The website is able to modify my clipboard.

Maybe javascript-can-access-clipboard only prevents read access? I'm more concerned about write access, because I have a bad habit of pasting things into my terminal, and websites being able to affect what I paste into my terminal seems dangerous.

If the current behaviour is intentional and won't be changed, the man page should be updated to clarify only read access is prevented.