Does changing it to require permission would mean that every "Copy Code" button will need a pop-up?
I am torn between the usability vs security of this issue.
I am torn between the usability vs security of this issue.
By default, you can copy to clipboard in all the major browsers when user takes an action, like click some buttons or links. So all these "copy code" buttons won't stop working. What does not in Firefox (and shouldn't in Chrome) is to do so without user's action.
Note: I have no idea what the rigid definition of "user's action" is. But clicking a button counts.