Ctrl+Alt+R
Also, uMatrix with js disabled by default works well, too.Don't touch my clipboard
251–260 of 322 posts
Re: Don't touch my clipboard
#252The wrongest thing about this, from my perspective, is that my browser fires off a js 'copy' event when I press control-c. There are times when I've found it helpful that a browser can copy text to my clipboard when I click a button, but I can't think of a single time when I want a site to react to my attempt to copy text off if it. Is there any way to configure my user agent (Firefox) not to do this? A hack is ok.
I think the wrongest thing is that this is a clear attack vector... make a site with helpful Linux shortcuts, then replace every copy with "curl malicious script and run it, plus a newline to make it run immediately"
Re: Don't touch my clipboard
#253It's not just a browser thing. Apple Books does this with their e-books, which is infuriating if you're working with a coding book and just want to copy-paste stuff into your editor/terminal. You get something like: “ghci> putStrLn (pretty 10 value)” Excerpt From: Bryan O’Sullivan, John Goerzen, and Donald Bruce Stewart. “Real World Haskell.” Apple Books. When you only copied: ghci> putStrLn (pretty 10 value) Note th…
I hate this behavior! Switched to a different eBook reader on my iPad because of it. I like copying interesting snippets to OneNote.
Re: Don't touch my clipboard
#254Furthermore don't touch my ability to paste into web forms. Some banks do this, and I have no idea why (some incredibly misguided idea of security?). I disabled the ability for websites to disable pasting using Firefox's about:config, but 99.9% of users won't know they can do this.
Have you encountered any unintended consequences from disabling this?
Re: Don't touch my clipboard
#255Re: Don't touch my clipboard
#256It's not just a browser thing. Apple Books does this with their e-books, which is infuriating if you're working with a coding book and just want to copy-paste stuff into your editor/terminal. You get something like: “ghci> putStrLn (pretty 10 value)” Excerpt From: Bryan O’Sullivan, John Goerzen, and Donald Bruce Stewart. “Real World Haskell.” Apple Books. When you only copied: ghci> putStrLn (pretty 10 value) Note th…
Wonder if an author will rename themself sudo rm -rf / with the proper escape codes.
Re: Don't touch my clipboard
#257Earlier quoted context omitted.
It seems strange that compose u o → ů is u-with-circle-on-top, but compose U G → Ğ is G-with-u-on-top, since it means it's sometimes modifier-first and sometimes base-first. (FWIW I use the compose key! Just not those particular characters, my set is incidentally consistent :-))
Order does not matter with compose, that also makes it more user friendly than dead keys. The modifiers' proper names are "ring above" and "breve".
Re: Don't touch my clipboard
#258Earlier quoted context omitted.
Even that won't totally save you. While you can't do exactly this, you can sure get the fun experience of the user getting text they didn't expect in the clipboard when copying without any JS at all. Text is highlighted on the page based on the code order, not as it appears on-screen (at least in Firefox and Chrome). If you throw elements off-screen with some CSS, you can create a big disparity between what the user…
This works when you manually select the text, but it fails when you want to select by double-/triple-clicking. In this case the selection ends before the word “me”. It’s awkward how easily one can break a basic functionality like select & copy.
Combine a few of those techniques with a fancy-looking text box that you are supposed to "click to copy" to get a command, and it becomes pretty easy to even write css-only "exploits" to put stuff in the clipboard!
Re: Don't touch my clipboard
#259Furthermore don't touch my ability to paste into web forms. Some banks do this, and I have no idea why (some incredibly misguided idea of security?). I disabled the ability for websites to disable pasting using Firefox's about:config, but 99.9% of users won't know they can do this.
> I disabled the ability for websites to disable pasting using Firefox's about:config, but 99.9% of users won't know they can do this. Have you encountered any unintended consequences from disabling this?
Re: Don't touch my clipboard
#260The wrongest thing about this, from my perspective, is that my browser fires off a js 'copy' event when I press control-c. There are times when I've found it helpful that a browser can copy text to my clipboard when I click a button, but I can't think of a single time when I want a site to react to my attempt to copy text off if it. Is there any way to configure my user agent (Firefox) not to do this? A hack is ok.