Works in IE - copy something to clipboard and go to web site

http://www.anonymizer.com/snoop/test_clipboard.shtml

Is it really the web site server seeing the clipboard contents or is it just client side stuff. Mind you even if just cleint side, would be easy to transmit the clipboard as a hidden field.

If you're running IE6, you are prompted "do you want this site to paste from your clipboard" or something similar...

It's a "hole" in javascript, but browsers should always prompt...

Nick.

Chiark - I use IE6 and it doesn't prompt me, just shows my clipboard. Bit worrying really :(

Anyway of disabling it?

Hmm, I'm using IE6.0.26 with update Q323759. Perhaps it's the update that sorted out the security patch?

I brazenly assumed that MS actually got something right first time around, or 6th time around. I should have known better :D

I restrict security anyhow ("prompt" for activex controls) etc so that might be it.

I'm running IE6.0.28 and it can read my clipboard !

How do you disable Active X ?

It can read mine (oo-er)...

6.0.2600.0000 with Q319182 ; Q323759

Go to Tools->Internet Options.
Click on the Security Tab.
Click on "Custom Level."
Scroll down to the Scripting section under Settings.
Set "Allow paste operations via script" to Disable or Prompt.

thanks.

I wish I understod the implications of more of those options !

Is there anything else which should be set to prompt ?

I set most things to prompt - sorry, forgot about that. I'm a generally untrusting swine...