Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a danger of my clipboard data being harvested by a webapp or site that I visit?

I would like to stay safe, but I want to keep Javascript enabled to give a better user experience.

share|improve this question
up vote 5 down vote accepted

Most modern browsers will not allow JavaScript to access your clipboard without at least a warning. It's plugins such as Flash that you need to worry about.

For more information, see MozillaZine's article which states:

By default, JavaScript is not allowed to read or set your clipboard data for security and privacy reasons. This is because websites scripts can erase and replace what you currently have in your clipboard (data loss issue) and they can read whatever you have in your clipboard (security and privacy issue); as such, you should grant access with caution.

There are extensions such as AllowClipboard Helper for Firefox which should let you decide exactly which sites have access to your clipboard.

share|improve this answer
or java applets ... – akira Jul 18 '10 at 17:17
@akira Untrusted Java applets should only get clipboard data if you explicitly copy/paste in that applet. – Tom Hawtin - tackline Jul 28 '10 at 15:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.