New Chrome feature "Reading files from the Clipboard" and impact for Symantec DLP detection

Data Loss Prevention

2 more products

18550

10 September 2021

30 July 2021

Google Chrome version 91, recently released, introduced a new feature, Reading files from the Clipboard, in which files can be uploaded to website and web applications from the Clipboard using Copy/Paste. The feature is enabled in the browser by default, but it only works if website and web application developers leverage a new API provided in the latest versions of the browser. 

Symantec Data Loss Prevention 15.8.x currently does not monitor files uploaded in Chrome using this new feature. Symantec is working on a hotfix to address this issue. 

Update September 10, 2021: A fix for the issue has been applied to the DLP Chrome browser extension for Windows. The new extension has been directly uploaded to the Chrome Web Store. If DLP endpoints are allowed access to the Chrome Web Store, the Chrome extension will be automatically updated. For customers who want to deploy the updated extenson using GPO and a locally hosted CRX file, you can request the CRX file from Symantec Support. 

The issue is also present in the macOS version of Chrome. Symantec is currently working on a fix for the issue for macOS. 

DLP versions earlier than 15.8 are not affected.

For Edge Chromium, there is no impact; the feature in Edge Chromium does not affect current DLP versions. 

This article will be updated when the fix to address the issue for macOS Chrome on DLP 15.8.x is available.