Skip to content
This repository has been archived by the owner on Feb 16, 2021. It is now read-only.

Deprecate RTF #651

Open
hallvors opened this issue Jun 1, 2016 · 2 comments
Open

Deprecate RTF #651

hallvors opened this issue Jun 1, 2016 · 2 comments

Comments

@hallvors
Copy link
Contributor

hallvors commented Jun 1, 2016

If a script asks ZeroClipboard to write RTF contents to the clipboard, we should emit a deprecation warning. RTF is unlikely to be available as a natively supported clipboard format because of security concerns.

Browser vendors know that data placed on the clipboard crosses the web -> native apps security boundary, and they want to be pretty cautious to avoid malicious payloads (we're discussing measures like transcoding image data to ensure it is safe).

With that in mind, allowing script-generated chunks of RTF to be written to the clipboard seems like a serious risk. Many applications with RTF support are probably old and not as hardened and tested as other stuff. ZeroClipboard needs to start warning users that this functionality is going away.

@hallvors
Copy link
Contributor Author

hallvors commented Jun 1, 2016

(It would be nice if this landed before #171)

@JamesMGreene
Copy link
Member

Good idea, since it sounds like the native HTML Clipboard will not support RTF. Thanks, @hallvors! 👍

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants