Open Bug 1336720 Opened 7 years ago Updated 2 years ago

warn user about invisible content when copying to clipboard

Categories

(Core :: DOM: Serializers, enhancement, P3)

Product:
Core
Component:
DOM: Serializers
Version:
54 Branch
Type:
enhancement

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: yangyudevel, Unassigned)

Details

(Keywords: dupeme) 

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36

Steps to reproduce:

https://lifepluslinux.blogspot.com/2017/01/look-before-you-paste-from-website-to.html

copy 'ls -lat'
paste


Actual results:

font-size: 0px invisible content gets pasted


Expected results:

warn the user potentially malicious content in being copied
As an aside, if we implemented 'user-select' instead of '-moz-user-select', the linked example would not have this issue, since we don't include non-selectable text in the selection.

That said, the example doesn't actually require this, since it moves the 'hidden' text offscreen.

We can't really use a warning though since there are valid reasons one might move content around or make it unselectable.
Severity: normal → enhancement
Component: Untriaged → Serializers
Keywords: dupeme
Product: Firefox → Core
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.