Live data from Hacker News

Cannot read clipboard from service worker in a MV3 chrome extension (2020)

bugs.chromium.org

41–50 of 56 posts

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#41
post #24

Earlier quoted context omitted.

>with no user activation or notification What? By choosing to install the extension you are activating it.

Do you also apply this logic to all other forms of hardware and software? For example TVs that spy on what you're watching.

We all do. A native app you install on a phone or desktop can do all sorts of things.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#42

I know there are a lot of valid complaints about Manifest v3, but I don't understand this one. You're telling me that browser extensions should be able to read and write to my clipboard silently at all times, with no user activation or notification? Honestly, that's kind of horrifying, and I'm shocked to hear it existed on v2 extensions. It sounds like a great way to build a keylogger for user passwords. What are som…

The thread contains lots of mentions of clipboard manager extensions which are apparently quite popular.

It should probably be put behind a permission, but generally I don't see how this is more problematic than an extension gaining full access to the page you're viewing.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#43

I know there are a lot of valid complaints about Manifest v3, but I don't understand this one. You're telling me that browser extensions should be able to read and write to my clipboard silently at all times, with no user activation or notification? Honestly, that's kind of horrifying, and I'm shocked to hear it existed on v2 extensions. It sounds like a great way to build a keylogger for user passwords. What are som…

> You're telling me that browser extensions should be able to read and write to my clipboard silently at all times, with no user activation or notification?

Well, the user has to activate the extension in the configuration menu, and it should include the notification that this feature is enabled, in the configuration menu. (If the user disables this feature but the extension is otherwise enabled, then the extension can have its own private clipboard instead. This can also be the case for web pages, too.)

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#44
post #5

Does any one have a sense of the likelihood that Google extends the original timeline for this changeover? How can you force everyone to update their software (in some cases overhaul) to a new system that isn't fully built yet? My company has two Chrome extensions, one of which is partly updated, and the other of which we haven't started yet. We have no idea what we'll discover when we begin the process of updating t…

It's google the graveyard and 69 chat apps memes are real. If you have the chance don't build anything on google services. Remember AMP? There were like AMP agencies popping up when it was introduced lol

I'm not sure where this idea came from, but AMP hasn't been discontinued. It also hasn't strictly been a Google project for quite some time.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#45
post #23

Earlier quoted context omitted.

I feel as though a comma and the end communicates a pause better. Especially since it use in formal English is similar.

My personal use for trailing ‘…’ is precisely to escape formal language and hint at something that is more complex or emotional than a simple pause. For instance “Did you just…unplug and replug the machine?”

Ah I forgot about it’s usage ! For me it still takes on a negative connotation when used at the end of a sentence

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#46
post #23

Earlier quoted context omitted.

I feel as though a comma and the end communicates a pause better. Especially since it use in formal English is similar.

Another name for ellipses (…) is “suspension point” and doesn’t have any true grammatical purposes, unlike a comma. A comma doesn’t necessarily indicate a pause and makes no sense to insert randomly… wherever you’d like the reader to pause.

For texting I meant specifically at the end of a sentence to indicate a possible continuation

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#47
What I think is that what should be needing for browser extensions is to be able to write extensions in C, and available only for manual install by advanced users (so that it is not available to the official catalog of extensions).

However, additional capabilities to interact with the browser are also needed, including to implement new and intercept existing: protocols, MIME types, character encodings, HTML commands, CSS commands, JavaScripts in web pages (and the API they have access to), ARIA, menus, user interface elements, etc. (I think things will need to be rewritten to make this work efficiently, including moving many features to extensions which are then included by default, instead of being core features.)

Making C APIs for purposes would be helpful, although even if the existing API are with JavaScripts, JavaScript functions can be accessed by C codes by implementing N-API, I suppose.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#48

I know there are a lot of valid complaints about Manifest v3, but I don't understand this one. You're telling me that browser extensions should be able to read and write to my clipboard silently at all times, with no user activation or notification? Honestly, that's kind of horrifying, and I'm shocked to hear it existed on v2 extensions. It sounds like a great way to build a keylogger for user passwords. What are som…

When you log into a site using bitwarden, and the site has 2FA, bitwarden stores the code automatically in the clipboard. It's pretty convenient.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#49
post #41
post #24

Earlier quoted context omitted.

Do you also apply this logic to all other forms of hardware and software? For example TVs that spy on what you're watching.

We all do. A native app you install on a phone or desktop can do all sorts of things.

A native app you install on a phone has a strictly limited sandbox and a permission model, and if it can silently read all clipboard without user interaction, that would be a bug that needs fixing.

Re: Cannot read clipboard from service worker in a MV3 chrome extension (2020)

#50

I know there are a lot of valid complaints about Manifest v3, but I don't understand this one. You're telling me that browser extensions should be able to read and write to my clipboard silently at all times, with no user activation or notification? Honestly, that's kind of horrifying, and I'm shocked to hear it existed on v2 extensions. It sounds like a great way to build a keylogger for user passwords. What are som…

When you log into a site using bitwarden, and the site has 2FA, bitwarden stores the code automatically in the clipboard. It's pretty convenient.

1Password manages to autocomplete the 2FA code in the next screen, for what it's worth.
Post reply on HN