[Webkit-unassigned] [Bug 124391] text/rtf clipboard data is empty (makes TinyMCE and textbox.io require Flash)

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 26 10:57:43 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=124391

--- Comment #7 from David Wood <david.wood at ephox.com> ---
I believe the security issue was leakage of local filesystem paths (e.g. in image locations). Instead of fixing the input filter to the RTF clipboard, the bug was closed with a sledge hammer by removing access to the RTF clipboard.

Chrome fixed this with code that should be quite similar to what Webkit needs. Please see https://bugs.chromium.org/p/chromium/issues/detail?id=317807

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170126/c6a5b5b6/attachment.html>


More information about the webkit-unassigned mailing list