Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Journal Journal: Injecting text into a copy/paste from text, using only CSS.

I recently discovered a half-bug which affects all the major browsers, and only requires CSS to function.
It is possible to place text-off screen in such a way as to add text in when a block of text (such as a URL) is copy/pasted as Firefox appears to select text based on the code, not on-screen location.
In the day and age when people are told to copy/paste links to sites to avoid fake links, this is a pretty easy way to falsify a link. It's not entirely effective, as it's easy to spot when you paste, and doesn't help with security certificates, but if one uses a long URL and masks it cleverly, it could be an effective tactic, given the ignorance of the average user.
Obviously, the text is selected due to code position, as doing it any other way would be slower, so whether this should be 'fixed' or if it is even a bug is in the air, but, at the very least, it's mildly interesting.

Slashdot Top Deals

"Today's robots are very primitive, capable of understanding only a few simple instructions such as 'go left', 'go right', and 'build car'." --John Sladek