A web browser should *NEVER* be able to look inside your clipboard without an explicit user action (such as ctrl-v). Honestly, this should not be a controversial statement. Microsoft Edge is one of the browsers that ships this dangerous capability. Here is the dialog you need to hunt for to turn this API off.
@kkarhan@infosec.space@torgo I consider #MicrosoftEdge and #Windows as #malware for shit like this and the option to basically load malicious SSL certs with a single HTTPS request...
GitHubGitHub - kkarhan/windows-ca-backdoor-fix: Fixes a critical backdoor in Windows' CryptoAPI, which allows to unconsenting Update of CA Certificates in the background. See https://www.heise.de/ct/ausgabe/2013-17-Zweifelhafte-Updates-gefaehrden-SSL-Verschluesselung-2317589.htmlFixes a critical backdoor in Windows' CryptoAPI, which allows to unconsenting Update of CA Certificates in the background. See https://www.heise.de/ct/ausgabe/2013-17-Zweifelhafte-Updates-gefae...