11335 2006-10-17 16:14:37 -0700 execCommand("Paste") not allowed 2026-01-01 14:40:53 -0800 1 1 1 Unclassified WebKit HTML Editing 420+ Mac OS X 10.4 RESOLVED WORKSFORME GoogleBug, InRadar P2 Normal --- 25486 7712 9915 1 c.petersen87 webkit-unassigned dev+webkit frances_c lethalman88 webkit oldest_to_newest 52314 0 c.petersen87 2006-10-17 16:14:37 -0700 10/17/06 2:53 PM Chris Petersen: * SUMMARY I believe this might be a known issue already but filing just in case. Paste toolbar icon doesn't function. Text that was copied to the clipboard doesn't get pasted into the document after I click the paste toolbar icon. * STEPS TO REPRODUCE 1. With r17089 , login to your Writely account (Google Docs & Spreadsheet) 2. Create a new document 3. Type some text in your document body. Select it all and click the Copy toolbar icon. 4. Now, click the Paste toolbar icon. Copied text doesn't get pasted into the document body. * RESULTS Copied text should get pasted back into the document body but doesn't 52243 1 c.petersen87 2006-10-17 16:17:07 -0700 This is filed as <rdar://problem/4788399>. 42322 2 harrison 2006-12-12 15:13:34 -0800 Works for me with TOT. 12292 3 darin 2007-04-26 16:57:09 -0700 We don't support the paste command from JavaScript for security reasons. We don't want a site to be able to sniff the contents of the pasteboard. 10033 4 justin.garcia 2007-05-14 15:28:37 -0700 *** Bug 12243 has been marked as a duplicate of this bug. *** 7859 5 webkit 2007-06-12 03:37:04 -0700 (In reply to comment #3) > We don't support the paste command from JavaScript for security reasons. We > don't want a site to be able to sniff the contents of the pasteboard. > There are web applications, like FCKeditor, where users really expect to have such kinds of features available. What should we do in such cases? Wouldn't it be a much better to display "The application is trying to access your clipboard information. Do you want to give access to it?", holding the execCommand execution until the user response, returning "true" or "false" if the command has been executed? 169 6 mjs 2007-09-22 03:54:38 -0700 It might be acceptable to allow Paste in response to a user action, but we'd have to consider the security implications. 162 7 webkit 2007-09-22 05:32:17 -0700 This is a common problem in all browsers. I agree that clipboard data may contain strictly private information, like passwords. So, a browser must note make it easy to retrieve that information, but should also make it impossible if the user wanted it. Today, only IE6- places no limits to it. It is quite simple to retrieve the clipboard data with it, and no restrictions are imposed. A very insecure thing. My idea is making things similar to popup blockers. Once a JavaScript application tries to access the clipboard, a Yes/No alert box is presented to the user, stating that the app wants to retrieve data from the clipboard. A nice "Don't ask me again for www.example.com" checkbox could also be available, which saves the user preference. Like popups, the user should have some way to reset it too. IE7 has implemented a similar thing. It is quite buggy though. Also, it doesn't have the checkbox to save the preference for the domain, but it doesn't ask it again for the same page if the user says "Yes". 62004 8 eric 2007-11-22 11:42:05 -0800 Dialog boxes are generally a very bad thing for user interaction. Clearly Google worked around this somehow if Harrison closed this as "works for me" a year ago. 62068 9 webkit 2007-11-23 02:52:27 -0800 (In reply to comment #8) > Dialog boxes are generally a very bad thing for user interaction. Clearly > Google worked around this somehow if Harrison closed this as "works for me" a > year ago. The current workaround used by Google is displaying an alert saying - "Your browser does not allow access to your computer's clipboard" - which is actually not a workaround to the problems explained in this ticket. Maybe Harrison could clarify this WFM. 63739 10 lethalman88 2007-12-09 01:31:57 -0800 Qt has a JavascriptCanAccessClipboard setting which would set DOMPasteAllowed (don't know if this is the correct setting). I think such setting would be the best way for the user, just like any other setting. 68759 11 justin.garcia 2008-01-29 19:58:54 -0800 *** Bug 12243 has been marked as a duplicate of this bug. *** 2168831 12 frances_c 2026-01-01 14:40:53 -0800 I can't reproduce this bug in Safari 26.2. Copied text gets pasted back into the document body. There are no toolbar icons. I selected copy and paste from the dropdown menu.