Skip to content

Fix message copy in the Electron shell - #22

Open
SuperstructureJH wants to merge 1 commit into
dataelement:mainfrom
SuperstructureJH:codex/fix-clipboard-permission
Open

Fix message copy in the Electron shell#22
SuperstructureJH wants to merge 1 commit into
dataelement:mainfrom
SuperstructureJH:codex/fix-clipboard-permission

Conversation

@SuperstructureJH

Copy link
Copy Markdown

Summary

  • allow Electron's clipboard-sanitized-write permission only for the trusted loopback Harness main frame
  • continue denying clipboard reads, subframes, file/external URLs, and all other permissions
  • add regression coverage for the permission boundary

Root cause

The Harness message action already calls navigator.clipboard.writeText, but the desktop shell rejected every permission request. Electron therefore denied clipboard writes inside DSH Desktop even though the same UI worked in a normal browser deployment.

Verification

  • npm test — 7 test files, 37 tests passed
  • npm run typecheck
  • npm run build

Acceptance boundary

Automated tests, type checking, and the production build pass. A real message-copy click in the packaged desktop app still needs manual acceptance.

@SuperstructureJH
SuperstructureJH marked this pull request as ready for review August 14, 2026 08:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant