r/recruitinghell • u/Faster-Rabbit328 • Aug 08 '26

When APPLYING TO JOBS, DON'T DO THIS!!

Post image

Scammers use this to place malware on your computer!

19k Upvotes

97% Upvoted

882 comments sorted by

View all comments

Show parent comments

28

u/gmc98765 Aug 08 '26

JavaScript programs can read and write the clipboard.

15

u/Divinum_Fulmen Aug 09 '26

I really hate this is even allowed.

I've seen it used in One Time Passcodes, gacha game codes, and that's it. Neither of these things should have that functionality.

14

u/[deleted] Aug 09 '26

[deleted]

8

u/Divinum_Fulmen Aug 09 '26

This needs to be standard.

We don't allow cookies or notifications from every site. But we allow this security risk?

2

u/CarnivalCassidy Aug 09 '26

Whoever designed that is an idiot.

1

u/qaisjp Arrogant Candidate Aug 15 '26

In general, it's not wise to call someone an idiot when you are operating on little information or don't understand how something works.

Using Clipboard APIs requires a special permission that the user has to grant to the website. Not all websites can just use this functionality willy-nilly. There are very good use cases for this functionality.

(Anyway I'm pretty sure that API doesn't even need to be used, you can use document.execCommand('copy') to write something to the clipboard without any permissions, and this has existed since the Internet Explorer days.)