Got copying xmpp address or GPG public key to the clipboard working, but only by allowing insecure inline javascript. I don't want to weaken the content security policy so I'll try doing something different.