Closed Bug 1909124 Opened 6 months ago Closed 6 months ago

Pasting from the clipboard is broken for Disqus comments when dom.event.clipboardevents.enabled=FALSE

Categories

(Core :: DOM: Copy & Paste and Drag & Drop, defect)

Firefox 128
defect

Tracking

()

RESOLVED INVALID

People

(Reporter: aros, Unassigned)

Details

Steps to reproduce:

Ctrl + V
Shift + V
Right mouse click -> Paste

all do NOT work for Disqus comments edit fields.

The following bug report contains enough websites where you can find Disqus comments on: bug 1875061.

In case you still need something:

https://videocardz.com/
https://itvision.altervista.org/

Bug 1610182 could be related but it's not seen any updates in years, so I'm filing a new one to draw attention to a critical issue.

Also discussed here with no success because seemingly Disqus doesn't care about any browsers other than Chrome any more:

https://disqus.com/home/discussion/channel-discussdisqus/bug_reports_feedback_why_has_disqus_disabled_pasting_from_the_clipboard/

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Copy & Paste and Drag & Drop' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → DOM: Copy & Paste and Drag & Drop
Product: Firefox → Core

Hi Artem,

which Firefox version are you using? I tried Firefox Nightly (130, from today) as well as Release (128) on Ubuntu and MacOS, but couldn't reproduce.

  • I opened an article on videocardz.com
  • I scrolled to the disqus comment widget
  • I focused the rich text editor
  • I pasted using CTRL-V or using the context menu.

This seems to work. Did I do something wrong?

Flags: needinfo?(aros)

dom.event.clipboardevents.enabled set to FALSE breaks it.

Sorry I've not added this crucial piece of information earlier.

Flags: needinfo?(aros)
Summary: Pasting from the clipboard is broken for Disqus comments → Pasting from the clipboard is broken for Disqus comments when dom.event.clipboardevents.enabled=FALSE

Ah, okay. Out of curiosity, why did you turn off this pref? Clipboard events are a vital web platform feature and it would make sense for rich text editors to use them.

Since I remember you are also the reporter of Bug 1847949 where we had trouble reproducing the issue: Is that pref turned off there as well?

(Marking invalid as clipboard events are a vital web platform feature)

Status: UNCONFIRMED → RESOLVED
Closed: 6 months ago
Flags: needinfo?(aros)
Resolution: --- → INVALID

Out of curiosity, why did you turn off this pref?

A few years ago I read that this particular option allows websites to do very bad things.

AFAIK, when this option is enabled, the website can override the buffer contexts and put something in there that you don't see. For example, you copy something and get something completely different in your clipboard, which is a huge security risk. Imagine you copy some bash/shell code. You don't want the website to change the content in any way.

And if I'm not mistaken, this problem has never been addressed.

Since I remember you are also the reporter of Bug 1847949 where we had trouble reproducing the issue: Is that pref turned off there as well?

That's indeed the case. I will now try to disable it and see how it fares.

Twitter now works as expected. Darn. I've been suffering for years. Both bugs can probably be closed as INVALID/WONTFIX. Suit yourself.

Flags: needinfo?(aros)
You need to log in before you can comment on or make changes to this bug.