Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ClipboardChange even spec: Callout details for cross-origin iframes and fencedframes #226

Open
ragoulik opened this issue Sep 20, 2024 · 0 comments
Labels

Comments

@ragoulik
Copy link

Proposing to call out the following:

For iframes: Current permissions policy that makes use of 'allow' attribute should be followed for clipboardchange event.
Listening to "clipboardchange" event within a cross-origin iframe can be enabled with Permissions Policy which allows for selectively enabling and disabling specific browser features and APIs. Specifically, "clipboard-read" permission needs to be passed to the "allow" attribute of the iframe, similar to how this is required for accessing async clipboard read APIs within a cross-origin iframe.

For fencedframes:
Given that the fencedframe element is a type of iframe with more native privacy features built in and only limited permission are considered for fencedframe via allow attribute (more information) proposing to not fire clipboardchange event in a fencedframe.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants