IE and Clipboard content exposure...

Just found this segnalation about a possible side effects (or flaw) of Internet Explorer (with or without XP SP2).

It seems that if you place a special Javascript code on a page, with IE you can extract data out of user's clipboard and modify it or post the content on the server. Not good...

You can try it by yourself, just click the link below:

Show clipboard contents

You can stop the problem by taking these actions:

  • Go to Tools --> Internet Options...
  • Click on the Security Tab
  • Select Internet Zone and then click Custom Level...
  • Scroll down to the scripting section and see "Paste operations via script"
  • Change the value to Prompt or Disable
  • P.S. Firefox is not affected by this problem.

    Print | posted on Monday, January 31, 2005 11:31 AM

    Comments on this post

    No comments posted yet.

    Your comment:

     (will show your gravatar)
     
    Please add 6 and 3 and type the answer here: