Why does DevTools need permission to write to the clipboard?

[jzombie]

React DevTools is asking for permission to read write the clipboard.

Why?

[YoussefKababe]

Came here to ask the same question after getting a warning from Chrome. Suspecting it's to make this copy to clipboard button work?

[jzombie]

Came here to ask the same question after getting a warning from Chrome. Suspecting it's to make this copy to clipboard button work?

That's interesting. The tradeoff isn't worth it, though, on a personal development machine.

[kafein]

I'm not going to use this extension until this permission is removed.

[tpudel]

Came here to ask the same question after getting a warning from Chrome. Suspecting it's to make this copy to clipboard button work?

Feels like an absolute cop-out reason for such a security risk in my opinion. If I want to copy paste something from react dev tools (I don't believe I have ever in the past to be honest), I will simply click, drag, and CTRL+C on the text.

For a developer-centric extension like this, it makes me wonder if this was actually a planned and explicitly chosen permission or if the extension was sold off to a third party.

[eps1lon]

We should probably just move these to optional_permissions.

Also keep in mind that this permission only grants write access not read access.

[hoxyq]

Yes, as @eps1lon mentioned, we only use it for write access. We don't have a permission to read clipboard data, please re-read the text that you've highlighted on the screenshot.

We added it here #32077 to make it more verbose and fix Firefox extension. I think Chrome doesn't really check for this permission to allow extensions writing to clipboard.

Thanks for flagging. I will research on moving it to optional permissions, this sound like a better approach.

[niraj2477]

On my mac extension disable automatically with below error.

[freakyflow]

I deleted it for now until this is fixed

[teremy]

Yeah, deleted for now. I'm glad Chrome told me. This isn't good.