Mulch security

[sankhababu]

Hi dev
Maybe you already came to know that, with latest update, websites may write to the clipboard in Chrome-based browser without user permission.

Here is the link of this info I found – https://www.ghacks.net/2022/08/27/websites-may-write-to-the-clipboard-in-chrome-without-user-permission/?amp

Presently Mulch suffering from this issue as I've tested with provided link.

It is a serious security issue.

Bromite, Kiwi and Brave android browser fixed that issue.

Are you working on it ?

Please let us know.

Regards

[SkewedZeppelin]

How many dozen more times do you want to spam this FUD?

Divested-Mobile/Mulch#1
#158

[ghost]

He is wrong for spamming, but he is right in that it does happen in Mulch. Seems to be fixed in Brave. Check webplatform.news and then paste from your keyboard

[SkewedZeppelin]

Mulch is ultimately the WebView for DivestOS, Mull is the recommended browser.

Changes to standalone Mulch are nice to haves, not a priority.

[SkewedZeppelin]

And for what it is Brave did not fix it, they just put in a dirty hack to make it look like it was fixed: brave/adblock-lists#953

[ghost]

Regardless, I just updated Mulch and now it asks for clipboard permission for the writing to clipboard now in that website while it didn't before, so that's good

[sankhababu]

Dear sir Sorry to bother you, there is a misunderstanding. I've no intention to FUD or spam. As a satisfied user of Mulch just wanted to point out the problem, nothing else. For the first time I logged in Github only for Mulch and Mull. If you kindly check Mulch with

https[https://webplatform.news/]://[https://webplatform.news/]webplatform.news[https://webplatform.news/]/[https://webplatform.news/] you can see the issue.

Just waiting for fix and update, no negativity 🙏🏽

Sorry again..

22 Oct 2022 11:41:58 pm Tad ***@***.***>:

…

How many dozen more times do you want to spam this FUD? — Reply to this email directly, view it on GitHub[#163 (comment)], or unsubscribe[https://github.com/notifications/unsubscribe-auth/A3SJOI5OFCN65HBK65GBN43WEQU65ANCNFSM6AAAAAARLXNIEU]. You are receiving this because you authored the thread.[Tracking image][https://github.com/notifications/beacon/A3SJOIZSVKTDKCZTO3WYJ7TWEQU65A5CNFSM6AAAAAARLXNIEWWGG33NNVSW45C7OR4XAZNRIRUXGY3VONZWS33OINXW23LFNZ2KUY3PNVWWK3TUL5UWJTQAHQRIO.gif]

[sankhababu]

https://webplatform.news/ - this is the link

[ghost]

Check now after latest update

[sankhababu]

Thanks Symphonic3648, seems the issue is fixed and resolved now.

And thanks SkewedZeppelin for unmasking Brave. I don't use it, just sometimes check for like such chromium issues only.
It has a long controversial background and the new one added as you pointed out.

I'll stick to Mull and Mulch and will bother you again for any problem 😊

Greetings 💐

[ghost]

For what it's worth brave is decent but you have to disable all the crypto bloat (and be mindful of things like this). Bromite would be the best but sadly they are delayed by weeks almost every chromium update

[sankhababu]

Absolutely right.👍🏼
And Mulch always staying ahead in update as I've seeing now for many months.