# fix\(web\): suppress the browser's default paste insertion unconditionally · stienswout/t3code

[View on GitCafe](https://git.cafe/stienswout/t3code/commit/ad3ec79b7795b3f8368897dde1e11dfae6cb35fb)

Repository: [stienswout/t3code](https://git.cafe/stienswout/t3code)

Visibility: public

Requested revision: ad3ec79b7795b3f8368897dde1e11dfae6cb35fb

Requested commit: ad3ec79b7795b3f8368897dde1e11dfae6cb35fb

Commit: ad3ec79b7795b3f8368897dde1e11dfae6cb35fb

Tree: 32dbd0f87bbe78957a45d3713464e75ddd0a8abf

Author: Wout Stiens

Committer: Wout Stiens

## Message

```
fix(web): suppress the browser's default paste insertion unconditionally

An empty text/plain paste previously returned before preventDefault, so
a clipboard carrying only richer types could have its converted text
inserted into the hidden textarea and leak through onInput without
bracketed-paste encoding — potentially alongside the async clipboard
read's delivery. The default is now always suppressed; the paste event
and the clipboard read remain the only delivery paths, still
deduplicated by the race token.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

```

## Parents

- [16b4553f057a1504cb42d307e36674d68b66f286](https://git.cafe/stienswout/t3code/commit/16b4553f057a1504cb42d307e36674d68b66f286?format=markdown)

[Source at this commit](https://git.cafe/stienswout/t3code/tree/ad3ec79b7795b3f8368897dde1e11dfae6cb35fb?format=markdown)