plugin.pasteboard issue

Solar2D Android
#1

I’m using the plugin.pasteboard in one of my apps, and I’ve noticed that the first time the app runs, a message appears saying: “MyAppName pasted from your clipboard.”

This message suggests that my app is reading the clipboard, but in reality, it only accesses the clipboard when the user selects a specific action in one of the game’s scenes. The plugin is loaded from main.lua using require("plugin.pasteboard"), and it seems that simply requiring the plugin triggers it to read the clipboard. Otherwise, there shouldn’t be any reason for this message to appear.

Warning androidx.fragment:fragment - outdated plugins
#2

I have created a new build using the latest version of Solar2D for the app I mentioned in this post, and the same issue still persists:

The pasteboard plugin apparently attempts to copy content from the clipboard internally, and this only happens the first time the app is launched and the plugin is required (require("plugin.pasteboard")). At that point, the app displays a toast message saying: “MyAppName pasted from your clipboard”.

I discovered this thanks to a user review stating that my app had fraudulent behavior, as it attempted to copy from the clipboard and could potentially access sensitive user data. This behavior is quite problematic for our apps that use this plugin.

I have already implemented a workaround so that the plugin is only required when the user performs the “copy to clipboard” action via a button. However, I still believe this issue should be addressed and fixed as soon as possible.

I reported this problem on GitHub some time ago, but it has not been given priority. I hope someone in charge will take it into consideration.