No Need to Copy Paste as Drag and Drop behavior is Applicable though the same domain. you just need to Make Attack Surface more flexible to trick the victim to leak his info.