from what I can tell it's not possible, at least the way I'm going about it. my best guess is that the cohost devs use a library for handling events and it blocks any "untrusted" events. I have made a script that takes a 'paste' event, takes imagedata from it, and makes a 'drop' event. it seems to be identical to a normal drop event in every way except for the isTrusted property. this is unforunate! but I'm sure they'll implement this soon anyway.






