Tab Atkins Jr.
jackalmage at gmail.com
Thu Jul 22 13:48:38 PDT 2010
On Thu, Jul 22, 2010 at 1:41 PM, Aryeh Gregor <Simetrical+w3c at gmail.com> wrote:
> On Thu, Jul 22, 2010 at 4:32 PM, Luke Hutchison <luke.hutch at mit.edu> wrote:
>> There is no legitimate reason that non-developers would need to paste
>> should be disabled by default on all browsers.
> of fun and useful things. Also fun but not-so-useful things, like:
> (Credit to johnath for that one. Repeat with 0 instead of 180deg to
> undo.) You can do all sorts of interesting things to the page by
> obviously security problems here too, but "no legitimate reason" is
> much too strong.
you can bring up and paste that into. As with Adam's suggestion of
allowing bookmarklets, this would push such attacks further into the
"too much effort to be effective" path, unlike the "copy+paste into
More information about the whatwg