Pasting from the clipboard is broken for Disqus comments when dom.event.clipboardevents.enabled=FALSE
Categories
(Core :: DOM: Copy & Paste and Drag & Drop, defect)
Tracking
()
People
(Reporter: aros, Unassigned)
Details
Steps to reproduce:
Ctrl + V
Shift + V
Right mouse click -> Paste
all do NOT work for Disqus comments edit fields.
The following bug report contains enough websites where you can find Disqus comments on: bug 1875061.
In case you still need something:
https://videocardz.com/
https://itvision.altervista.org/
Bug 1610182 could be related but it's not seen any updates in years, so I'm filing a new one to draw attention to a critical issue.
|
Reporter | |
Comment 1•7 months ago
|
||
Also discussed here with no success because seemingly Disqus doesn't care about any browsers other than Chrome any more:
|
||
Comment 2•7 months ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::DOM: Copy & Paste and Drag & Drop' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
|
||
Comment 3•7 months ago
|
||
Hi Artem,
which Firefox version are you using? I tried Firefox Nightly (130, from today) as well as Release (128) on Ubuntu and MacOS, but couldn't reproduce.
- I opened an article on videocardz.com
- I scrolled to the disqus comment widget
- I focused the rich text editor
- I pasted using CTRL-V or using the context menu.
This seems to work. Did I do something wrong?
|
|
Reporter | |
Comment 4•7 months ago
|
||
dom.event.clipboardevents.enabled set to FALSE breaks it.
Sorry I've not added this crucial piece of information earlier.
|
|
||
Comment 5•7 months ago
|
||
Ah, okay. Out of curiosity, why did you turn off this pref? Clipboard events are a vital web platform feature and it would make sense for rich text editors to use them.
Since I remember you are also the reporter of Bug 1847949 where we had trouble reproducing the issue: Is that pref turned off there as well?
(Marking invalid as clipboard events are a vital web platform feature)
|
|
Reporter | |
Comment 6•7 months ago
|
||
Out of curiosity, why did you turn off this pref?
A few years ago I read that this particular option allows websites to do very bad things.
AFAIK, when this option is enabled, the website can override the buffer contexts and put something in there that you don't see. For example, you copy something and get something completely different in your clipboard, which is a huge security risk. Imagine you copy some bash/shell code. You don't want the website to change the content in any way.
And if I'm not mistaken, this problem has never been addressed.
Since I remember you are also the reporter of Bug 1847949 where we had trouble reproducing the issue: Is that pref turned off there as well?
That's indeed the case. I will now try to disable it and see how it fares.
Twitter now works as expected. Darn. I've been suffering for years. Both bugs can probably be closed as INVALID/WONTFIX. Suit yourself.
Description
•