Unsolicited iOS14 clipboard permission prompt

At WWDC2020, Apple announced that it was cracking down on clipboard sniffing by showing a prompt when an app attempts to access the clipboard. This likely means that Flutter apps that feature text input will trigger this at strange times.

As of #54902, Flutter began checking the clipboard contents to decide whether or not to show the paste button in the text selection menu. Previously, it would always show the button, even when nothing pasteable existed in the clipboard.

When exactly are Flutter apps seeing this clipboard permission dialog? What should we do about it?

Some options:

Revert to the old behavior (show the paste button regardless of clipboard contents).
Revert only for iOS, or only or iOS 14. Provide the developer an option to enable the feature on iOS 14 anyway?

Yea I have it being spammed in one of my apps.

@EliasDeuss Thanks for posting the gif! I hadn't actually reproduced it yet. Looks bad, we'll definitely have to fix this.

@EliasDeuss Thanks for posting the gif! I hadn't actually reproduced it yet. Looks bad, we'll definitely have to fix this.

It also might be that bad because the page has a StreamBuilder on it. (Don’t know if that would effect it.)

Every flutter app including apps on the stores have this “paste notification”
It is very bad,
Customer think we are storing there information

Apparently, Apple is also introducing a set of new APIs for clipboards: https://9to5mac.com/2020/06/24/ios-14-clipboard-notifications/

I haven't dived into it, but maybe those can help us to determine if there's anything interesting in the clipboard before actually accessing it.

To people who have seen the notification in the wild for a Flutter app: When does it actually show up?

We should fix this before iOS 14 launches.

@jonahwilliams

@jonahwilliams also pointed to https://developer.apple.com/documentation/uikit/uipasteboard/1829416-hasstrings?language=objc, which may help us.

I have the most up to date version of Flutter, and I have updated my app, however I am still getting this "copied from clipboard" notification on the launch of my app (when the app is completely closed and then opened).

As I am using Deeplinks, I have even included this flag in my info file
FirebaseDeepLinkPasteboardRetrievalEnabled = 0

Doctor summary (to see all details, run flutter doctor -v):
[✓] Flutter (Channel stable, 1.22.3, on Mac OS X 10.15.7 19H2, locale en-GB)
 
[✓] Android toolchain - develop for Android devices (Android SDK version 29.0.3)
[✓] Xcode - develop for iOS and macOS (Xcode 12.1)
[✓] Android Studio (version 4.0)
[✓] Connected device (1 available)

• No issues found!

Packages my app uses

cupertino_icons: ^1.0.0
  http: ^0.12.2
  flutter_secure_storage: ^3.3.5
  connectivity: ^2.0.1
  device_info: ^1.0.0
  sqflite: ^1.3.1+2
  path_provider: ^1.6.24
  fluttertoast: ^7.1.1
  sprintf: ^5.0.0
  url_launcher: ^5.7.2
  firebase_messaging: ^7.0.3
  firebase_dynamic_links: ^0.6.0+2
  get_it: ^5.0.1
  syncfusion_flutter_gauges: ^18.3.40
  image_picker: ^0.6.7+12
  cached_network_image: ^2.3.3
  file_picker: ^2.0.10
  flutter_app_badger: ^1.1.2

@billymahmood

@billymahmood Something in your app (or a package) is probably accessing the clipboard. Can you narrow it down and find out what it is?

@billymahmood

@billymahmood @justinmc It's most likely firebase_dynamic_links, which uses the clipboard to "reload" the dynamic link that was created when the user was redirected to the app. It's a trick for "sharing" data with an app from the browser.

For example: When a user doesn't have the app and first needs to download it, it would set the clipboard in the browser, then once the app is launched, it checks to see if there's a dynamic link to load.

@benPesso

Thanks @benPesso! I wasn't aware. Sounds like something that's not fixable, but I've opened an issue in the flutterfire repo in case there's anything they can do: firebase/flutterfire#4051

@justinmc

@justinmc I got a bit lost with all the multiple related issues. Is there any progress with adding the hasStrings() check to the Flutter Clipboard utility (or the underlying Clipboard.getData platform channel?

No, I haven't worked on it.

@justinmc

@justinmc can you update the milestone on this issue?

Whoops, done thanks!

any updates for this issue ?

This should be the final PR to fix this issue the right way, unless I've missed something: #87678

This thread has been automatically locked since there has not been any recent activity after it was closed. If you are still experiencing a similar issue, please open a new bug, including the output of flutter doctor -v and a minimal reproduction of the issue.

Navigation Menu

Repository navigation

Unsolicited iOS14 clipboard permission prompt #60145

51 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Unsolicited iOS14 clipboard permission prompt #60145

Description

Activity

edeuss commented on Jun 24, 2020

justinmc commented on Jun 24, 2020

edeuss commented on Jun 24, 2020

tamirrab commented on Jun 24, 2020

goderbauer commented on Jun 24, 2020

goderbauer commented on Jun 24, 2020

goderbauer commented on Jun 24, 2020

51 remaining items

billymahmood commented on Nov 5, 2020

justinmc commented on Nov 5, 2020

benPesso commented on Nov 6, 2020

justinmc commented on Nov 6, 2020

benPesso commented on Nov 9, 2020

justinmc commented on Nov 9, 2020

pcsosinski commented on Jan 13, 2021

justinmc commented on Jan 14, 2021

yacineblr commented on May 5, 2021

justinmc commented on Aug 5, 2021

github-actions commented on Sep 10, 2021

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions