Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1029568 > unrolled thread

Bug#825198: firefox: please disable any access from the browser to the clipboard

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#825198: firefox: please disable any access from the browser to the clipboard Julien Cristau <jcristau@debian.org> - 2020-10-22 11:50 +0200
    Bug#825198: firefox: please disable any access from the browser to the clipboard Christoph Anton Mitterer <calestyo@scientia.net> - 2020-10-22 12:00 +0200

#1029568 — Bug#825198: firefox: please disable any access from the browser to the clipboard

Control: severity -1 wishlist
Control: tag -1 - security
Control: tag -1 wontfix

Closing as wontfix, feature requests belong upstream rather than in the BTS.

Cheers,
Julien

On Tue, May 24, 2016 at 03:57:28PM +0200, Christoph Anton Mitterer wrote:
> Source: firefox
> Severity: important
> Tags: security
> 
> 
> Hi.
> 
> There is no reason why a browser should access the clipboard
> of the client.
> It opens all kinds of attack vetors and likely privacy leaks.
> 
> See e.g. recent exploits[0].
> 
> I wouldn't be all to surprised if Mozilla would also allow
> to read out the current clip board contents, which wold be a
> really grave issue, as it could contain passwords, keys, etc.
> 
> There has been some recent media coverage[1] (this one in
> German) about [0].
> 
> Cheers,
> Chris.
> 
> [0] https://github.com/dxa4481/Pastejacking
> [1] http://www.golem.de/news/pastejacking-im-browser-codeausfuehrung-per-copy-and-paste-1605-121062.html

[toc] | [next] | [standalone]

#1029570

On Thu, 2020-10-22 at 11:43 +0200, Julien Cristau wrote:
> Control: tag -1 - security

Strange to see that, as there were (and are) clearly exploits.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web