Disable "Allow paste operation via script"

[tashi]

To fix this it is simple, do the following in your browser:
Tools->Internet Options->Security->Custom Level scroll down to "Scripting"
Disable "Allow paste operation via script"
Hit OK and you should be good to go.

To verify, repeat step 1 & 2 and you will see the link can not see your clipboard.


That fix did not work for me. :scratch:

[md usa spybot fan]

It appears to have worked for me:

Windows XP (Home) SP2 (WinNT 5.01.2600)
Internet Explorer v6.00 SP2 (6.00.2900.2180)

[tashi]

Odd.

WARNING, TEXT RETRIEVED: (see below)

So try this: 1) Copy any text by ctrl+c 2) Click the Link:

Windows XP (Pro) SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

I was trying out IE7 Beta; returned to IE6 but the fix did not work on either.

[md usa spybot fan]

After modifying setting: "Scripting"
"Allow paste operation via script" from "Enable" to "Disable"
When I copy to the clipboard (Ctrl + C) and the going to the following link: http://www.sourcecodesworld.com/special/clipboard.asp
I get:


No text found in clipboard. This is a good thing!

Works with Internet Explorer and Netscape.
If I set it back to "Enable" I get"


WARNING, TEXT RETRIEVED: (see below)

Make sure that you are doing it for each security zone although:
My Restricted zone was already set that way.
--- and ---
The www.sourcecodesworld.com site should be in the Internet zone (it is on my system), which is the default zone when you go into the Security tab in Internet options.

[tashi]

Make sure that you are doing it for each security zone although:


That did it, thanks. Silly me. :D

[tashi]

Split off from: http://forums.spybot.info/showpost.php?p=13236&postcount=20

[siljaline]

Try these Settings (http://www.mvps.org/winhelp2002/restricted.htm#Setting)

Silj

[tashi]

Thank you siljaline. :)

Also members can find links in this topic:
Have you updated Windows? Security Programs? Links and Tips. (http://forums.spybot.info/showthread.php?t=425)

[siljaline]

Thank you siljaline. :)

Also members can find links in this topic:
Have you updated Windows? Security Programs? Links and Tips. (http://forums.spybot.info/showthread.php?t=425)
Your welcome, Tashi ;)

Great Security Teak for IE, that Setting (http://www.mvps.org/winhelp2002/restricted.htm#Setting )

Regards,

Silj

[AplusWebMaster]

Despite setting the same corollary setting in IEv7 (now called "Allow Programmatic clipboard access" instead of "Allow paste operations via script"), the test -fails-, although it doesn't actually show what was copied from the clipboard (my results, anyway ~ Anyone else care to verify?).

It would appear there is a bug (horrors!) in the new IEv7 (fully patched - includes all MS patches issued 11.14.2006).

Same test link still available: http://www.sourcecodesworld.com/special/clipboard.asp but it is now LOADED with ad's (ugh!).

For the moment, it would appear the best resolution is found at that site:
"The best way to solve this problem is to use Firefox..."

.

[md usa spybot fan]

When I first converted from IE 6 to IE 7 the blocking of access to the clipboard was the one of first things. My tests were successful in both blocking and allowing access to the clipboard with IE7 as they were under IE6.

I noted the change in the name from:
Allow paste operation via script
To:
Allow Programmatic clipboard access
I considered how to publish the change in name for blocking the problem, but because your original alert was published back in February, I didn't do it (negligent on my part).

In any case, I able to both allow and disallow the test Web page from accessing the clipboard by altering the "Allow Programmatic clipboard access" from "Enable" to "Disable".

There are several things remember while testing; the "Custom Level" of "Security" settings must be set for each security zone individually (the test Web site is in the Internet zone), it appears that after making the change you must do an "OK", "OK" until the Internet Options dialog closes for the change to be affective and then the test Web page must be reloaded.

Testing with "Testing this thing" in the clipboard at:
http://www.sourcecodesworld.com/special/clipboard.asp
Disabled:


Text From Your Clipboard?

WARNING, TEXT RETRIEVED: (see below)




Enabled

Text From Your Clipboard?

WARNING, TEXT RETRIEVED: (see below)

Testing this thing

[AplusWebMaster]

'Any ideas why the diffferent results between IEv7 and FFv2.0?

:scratch:

[md usa spybot fan]

I personally don't use FireFox.

[siljaline]

Jack, please ping me offline, the IE Team may have something for you.

Silj

[AplusWebMaster]

Newer test site, posted/link here:
- http://blog.washingtonpost.com/securityfix/2006/12/clipboard_data_theft_optional.html
December 21, 2006; 11:07 AM ET

> http://www.scriptingmagic.com/Topics/IE%20Specific/Clipboard%20Plunder/
It appears this "bug" is a setting in IE7:
>Tools >InternetOptions >Security >CustomLevel >Scripting >(Set)Allow Programmatic Clipboard Access (...to Disable)
...should have been the "Default" setting, but it ain't.

.

[siljaline]

Hi Jack - thanks, I'll have a peek once Xmas shopping is done.

Merry Christmas to you and yours!!

Regards,
Silj