Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Bug

Journal lattyware's Journal: Injecting text into a copy/paste from text, using only CSS.

I recently discovered a half-bug which affects all the major browsers, and only requires CSS to function.
It is possible to place text-off screen in such a way as to add text in when a block of text (such as a URL) is copy/pasted as Firefox appears to select text based on the code, not on-screen location.
In the day and age when people are told to copy/paste links to sites to avoid fake links, this is a pretty easy way to falsify a link. It's not entirely effective, as it's easy to spot when you paste, and doesn't help with security certificates, but if one uses a long URL and masks it cleverly, it could be an effective tactic, given the ignorance of the average user.
Obviously, the text is selected due to code position, as doing it any other way would be slower, so whether this should be 'fixed' or if it is even a bug is in the air, but, at the very least, it's mildly interesting.
This discussion has been archived. No new comments can be posted.

Injecting text into a copy/paste from text, using only CSS.

Comments Filter:

Real Programmers don't eat quiche. They eat Twinkies and Szechwan food.

Working...