Hi,
regarding the paste security issues (pastejacking) [1] there is one last
thing that shall be done to make it possible for terminal emulators to
enable a secure shell by default: Enable bracket pasting mode in bash,
by default.
For details, see https://gitlab.gnome.org/GNOME/vte/issues/92, demo
https://thejh.net/misc/website-terminal-copy-paste.
GNOME Terminal e.g. mitigated this, but without a proper default of the
shell, it won't help.
Best regards,
rugk
[1] https://bugzilla.gnome.org/show_bug.cgi?id=697571