Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #740918

Bug#825198: firefox: please disable any access from the browser to the clipboard

Show all headers | View raw

Source: firefox
Severity: important
Tags: security


Hi.

There is no reason why a browser should access the clipboard
of the client.
It opens all kinds of attack vetors and likely privacy leaks.

See e.g. recent exploits[0].

I wouldn't be all to surprised if Mozilla would also allow
to read out the current clip board contents, which wold be a
really grave issue, as it could contain passwords, keys, etc.

There has been some recent media coverage[1] (this one in
German) about [0].

Cheers,
Chris.

[0] https://github.com/dxa4481/Pastejacking
[1] http://www.golem.de/news/pastejacking-im-browser-codeausfuehrung-per-copy-and-paste-1605-121062.html

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#825198: firefox: please disable any access from the browser to the clipboard Christoph Anton Mitterer <calestyo@scientia.net> - 2016-05-24 16:10 +0200

csiph-web