@nzakas Flip side: creating an API that allows sites to block paste or otherwise distinguish between paste and manual entry of characters is malice by the browser.