Issue
Hello.
Normally, before editing a document through plugin API, a user must interact with the plugin in some way (e.g. clicking a button), but JavaScript allows us to fake a button “click” through the code using HTMLElement’s click() function, which bypasses this need because that faked button “click” event is considered to have been made by the user. I assume this is not intended to work this way?
Steps to reproduce
const div = document.createElement('div');
div.addEventListener('click', () => {
// Now we can edit the document without any problems:
// application.editDocument(...)
div.remove();
});
document.body.appendChild(div);
// Wait for our <div> to be actually added to the DOM, otherwise
// the click event will not be fired.
setTimeout(() => {
div.click();
});
Tested on the latest version (30.3.12.5).
