
Security News
Scaling Socket from Zero to 10,000+ Organizations
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.
Just include the library (~2kB!):
<script src="https://cdn.jsdelivr.net/gh/ryanpcmcquen/cheval@latest/cheval.min.js"></script>
https://cdn.jsdelivr.net/gh/ryanpcmcquen/cheval@latest/cheval.min.js
Provided by:
Then use the following elements:
<textarea> with the class text-to-copy (can be readonly but not disabled)<button> with the class js-copy-btnThe library takes cares of the rest. :shipit:
:newspaper: You don't have to write any JavaScript to use it!
Alternatively, you can use the project with npm:
npm install cheval
Almost everywhere!
Desktop:
Android:
iOS:
Everywhere else (old versions of Safari), it will select the text. The library detects iDevices and will change the inital button text to Select text (to avoid confusing the user). After clicking it will say either Now tap 'Copy' (iPhone) or Now tap the text, then 'Copy' (iPad), to account for the strange behavioral differences of these devices.
On desktop Safari (< v10), the button will change to Press Command + C to copy.
On failure the button will say Please copy manually.
:warning: If you want your textarea to be invisible for some reason, use this CSS:
.text-to-copy {
opacity: 0;
position: absolute;
}
Because it will not work with display: none; or visibility: hidden;. :thumbsup:
Note that you should also supplement that CSS with something like this helper library, otherwise people on iOS will not be able to copy at all since Safari doesn't support cool stuff:
https://gist.github.com/ryanpcmcquen/1229119ffcf5098543c0
If you aren't concerned with maximum compatibility, you can use elements besides a textarea.
You may also add multiple copy elements and buttons to each page, using the following format:
<textarea class="text-to-copy-0"></textarea>
<button class="js-copy-btn-0"></button>
<textarea class="text-to-copy-1"></textarea>
<button class="js-copy-btn-1"></button>
<textarea class="text-to-copy-2"></textarea>
<button class="js-copy-btn-2"></button>
<textarea class="text-to-copy-3"></textarea>
<button class="js-copy-btn-3"></button>
The characters after the dash in text-to-copy- or js-copy-btn- can be anything, they just have to match between the button and element.
For example:
<textarea class="text-to-copy-email"></textarea>
<button class="js-copy-btn-email"></button>
Positioning of the elements and buttons does not matter, they do not need to be near each other on the page. This allows you to write declarative markup and not be concerned with the inner workings of this library. Enjoy!
cheval only runs on page load!You're right! That's why in version 1.3.0, cheval also adds itself to global scope.
Now you can invoke at will on dynamic elements!
cheval('.dynamic-js-copy-btn', '.dynamic-text-to-copy');
What does cheval mean?
The name comes from Cheval glass, a type of mirror.
This project is LibreJS compliant!
If you prefer using specific tags instead of the latest version, you may specify a tag in the jsDelivr URL:
https://cdn.jsdelivr.net/gh/ryanpcmcquen/cheval@2.0.0/cheval.min.js
If you wish to contribute to this project, pull requests are always welcome! Please make sure that any changes pass through
with the following options before submitting them:
/*global module, window*/
/*jslint browser: true*/
Thanks to Lea Verou for lots of support and help with the name.
Thanks to Nikita Tcherednikov for the Cheval icon, provided under the Creative Commons license.
Thanks to Charles Raymond Macauley for the drawing available here. (Public domain)
Thanks to BrowserStack and Koding!
Full download stats available here:
https://data.jsdelivr.com/v1/package/gh/ryanpcmcquen/cheval/stats?from=2014-01-01
FAQs
Copy to the clipboard using JavaScript without writing JS.
We found that cheval demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.

Research
Socket Threat Research maps a rare inside look at OtterCookie’s npm-Vercel-GitHub chain, adding 197 malicious packages and evidence of North Korean operators.

Research
Socket researchers identified a malicious Chrome extension that manipulates Raydium swaps to inject an undisclosed SOL transfer, quietly routing fees to an attacker wallet.