Hacker News Reader

Current Google Docs already uses iframes to intercept keyboard/text events, the document you actually see isn't the thing you're interacting with, because contentEditable is nowhere near powerful enough for something like this.

All their decision to use canvas is doing is changing the render target.

Web browsers have APIs for things like the clipboard these days.

Which makes you wonder why it doesn't work in Firefox (where it='copy & paste in Google docs').

They already have, the sample document has copy implemented.

I don't know but Figma do it without issues, maybe there are some hidden inputs behind the canvas that are selected

Wouldn't that cause security issues which should be blocked by browsers?

I.e. on some malicious website you could select some innocent looking text, but under the covers it selects some evil bash command.

This is already possible with tiny or invisible text, I don't think browsers are trying to protect from that. The protections that exist are to prevent sites from reading your clipboard or replacing it without you clicking on anything, other than that the site already has control over what goes in it.