Clipboard access makes most users suspicious #159

New issue

Closed

opened 2023-10-23 05:03:26 +00:00 by pantos27 · 1 comment

pantos27 commented

2023-10-23 05:03:26 +00:00

(Migrated from github.com)

When the average user browse to https://torrentio.strem.fun/ he gets a permission request to access his clipboard because of this line:
12286cba02/addon/lib/landingTemplate.js (L477)

This makes most users suspicious of the add-on for obvious reasons, even though the intent was naive
https://bufferzonesecurity.com/clipboard-hijacking-attacks-and-how-to-prevent-them/

I suggest wrapping this action behind a button that will write the link to the clipboard instead of accessing it straight away

When the average user browse to https://torrentio.strem.fun/ he gets a permission request to access his clipboard because of this line: https://github.com/TheBeastLT/torrentio-scraper/blob/12286cba027899c98064698d09ae442cc2f7561f/addon/lib/landingTemplate.js#L477 This makes most users suspicious of the add-on for obvious reasons, even though the intent was naive https://bufferzonesecurity.com/clipboard-hijacking-attacks-and-how-to-prevent-them/ I suggest wrapping this action behind a button that will write the link to the clipboard instead of accessing it straight away

TheBeastLT commented

2023-11-02 10:20:19 +00:00

(Migrated from github.com)

That is true, tho I don't see it as a big issue atm. I'll try to look into when I have time or I'll welcome a quality PR to improve this.