Copy to clipboard fails silently with macOS Safari when served remotely via http (not https)

[DD-P]

1. OpenGist 1.7.2 via Ubuntu 23.10 containerised in Docker using the supplied docker-compose.yml.
2. Clicking copy gist button does not place text on the clipboard

Results in TypeError: undefined is not an object (evaluating 'navigator.clipboard.writeText') in JavaScript console.

Explanation

This will work correctly over eg https://gist.homelab:6157 or http:https://localhost but not eg http:https://192.168.1.100:6157 or http:https://gist.homelab:6157

See https://webkit.org/blog/10855/async-clipboard-api/ which states —

The async clipboard API is a powerful web API, capable of both writing arbitrary data to the clipboard, as well as reading from the system clipboard. As such, there are serious security ramifications when allowing pages to write data to the clipboard

• The API is limited to secure contexts, which means that navigator.clipboard is not present for http:https:// websites.

Workaround (Google Chrome)

1. Allow-list your particular URL in Google Chrome via chrome:https://flags/#unsafely-treat-insecure-origin-as-secure in the Insecure origins treated as secure field.
2. Access eg http:https://gist.homelab:6157 via Chrome

[thomiceli]

Not much to do from my side but this is good to know, maybe we should add this in the documentation