clipboard-apis icon indicating copy to clipboard operation
clipboard-apis copied to clipboard

ClipboardChange even spec: Callout details for cross-origin iframes and fencedframes

Open ragoulik opened this issue 1 year ago • 0 comments

Proposing to call out the following:

For iframes: Current permissions policy that makes use of 'allow' attribute should be followed for clipboardchange event. Listening to "clipboardchange" event within a cross-origin iframe can be enabled with Permissions Policy which allows for selectively enabling and disabling specific browser features and APIs. Specifically, "clipboard-read" permission needs to be passed to the "allow" attribute of the iframe, similar to how this is required for accessing async clipboard read APIs within a cross-origin iframe.

For fencedframes: Given that the fencedframe element is a type of iframe with more native privacy features built in and only limited permission are considered for fencedframe via allow attribute (more information) proposing to not fire clipboardchange event in a fencedframe.

ragoulik avatar Sep 20 '24 13:09 ragoulik