1962874 - clipboard button appears outside the window or other lead to confusion

Status: NEW

(Core :: DOM: Copy & Paste and Drag & Drop, defect)

Description

[Hafiizh]

Attachment: bandicam 2025-04-27 06-41-14-383.mp4

I found a vulnerability where the clipboard button appears outside the window or other lead to confusion

1. open buttonremain.html
2. click on web content
3. click maximize or click menu or move to omnibox

OS: windows 11
Firefox version: Nighlty 139.0a1 (2025-04-24) (64-bit)

Comment 1

[Hafiizh]

Attachment: buttonremain.html

Comment 2

[Daniel Veditz [:dveditz]]

I can reproduce the button showing up in some odd places, like mousing over some toolbar buttons can drop a "Paste" button even if I don't actually click there. But (on mac) I can't reproduce shrinking the window and leaving the paste button floating in space. The button goes away the instant I grab the window border (could be an OS difference).

This is clearly all wrong and broken, but I don't see how it's a security bug.

Comment 3

[Hafiizh]

When the window is minimized and the clipboard button appears after the window is minimized and behind it there may be a word application or another application, this causes confusion which can cause the victim to click on it.

Comment 4

[Daniel Veditz [:dveditz]]

We don't think this bug needs to be hidden for security reasons. It's just buggy