twitter.com/freddyb/status
A permission is still required to read the clipboard. There are multiple APIs for accessing the clipboard. One of those APIs required a user interaction with the page such as clicking on anything, scrolling, etc. for each read or write. The other did not.
Conversation
Replying to
Arbitrary user interactions with a web site clearly don't express intent to paste clipboard. That was required for one of the APIs and was removed. It was never required for the other API and is forbidden by the spec. Enforcing something for one way but not the other is theatre.
1
11
There should really also be a permission required to use an API to write to the clipboard, but it would be difficult to convince them to do that by default. It should at least be an option. Requiring user interaction for one API but not the other is simply useless theatre though.
1
6