Paste (context menu) does not work in security based edge cases

[bgareth]

Is your feature request related to a problem? Please describe.
When using the context menu to "Paste", it required read permissions from the computer clipboard. If the library is used within an iFrame or environment that excludes this permission due to security considerations, the action will result in an error in the console and nothing happens in the sheet.

Describe the solution you'd like
Use localCopyData as fallback. When copying, in addition to the current logic, store the data in sessionStorage. When pasting and reading from the clipboard, include a fallback to use the data stored in sessionStorage, allowing for a secure way to maintain functionality in the case of limited clipboard permissions.

Describe alternatives you've considered

• localStoragecould be used in place of sessionStorage, but is slightly less secure which goes against the "target audience" of this fix.
• localCopyData could be stored in context instead, allowing for potential future uses.

Additional context
This should not impact the original logic / functionality, but only solve the potential issues in the above edge cases.

[bgareth]

I will look in to fixing this if contributors / maintainers are happy.
@sanchit3008

[bgareth]

Potential PR: #673

[sanchit3008]

hi @bgareth, thanks for the pr. i am wondering in what setups this might be useful other than an iframe. from what i see, components inside an iframe can access the clipboard data with the right perms. (reference). do you think this will solve the use case you submitted a pr for?

[bgareth]

hi @bgareth, thanks for the pr. i am wondering in what setups this might be useful other than an iframe. from what i see, components inside an iframe can access the clipboard data with the right perms. (reference). do you think this will solve the use case you submitted a pr for?

Yes, @sanchit3008 , adding permissions to the iframe does work. However, this submission is to maintain functionality in cases where the iframe or the user does not allow clipboard access (due to security or other reasons).