To avoid potential issues, the Clipboard API can only be used on pages served over HTTPS ( localhost is also permitted). A nefarious page could replace copied text with a dangerous command or even an executable file.
It’s finally been superseded by a new asynchronous Clipboard API.