Re: [dev] [st] Hardening bracketed paste mode

2025-05-12 Thread Steffen Nurpmeso
Vincent Lefevre wrote in <20250512091003.ga497...@qaa.vinc17.org>: |On 2025-05-10 15:49:20 +0100, Andrew Mass wrote: |> One seemingly simple way to prevent this would be to sanitize / |> disallow pasting buffers that contain this exact sequence. If |> bracketed paste mode is active, it seems i

Re: [dev] [st] Hardening bracketed paste mode

2025-05-12 Thread Vincent Lefevre
On 2025-05-11 09:01:04 +0200, fom...@0w.se wrote: > On Sat, May 10, 2025 at 03:49:20PM +0100, Andrew Mass wrote: > > One advantage of this is > > preventing commands from running automatically when pasted into the > > terminal. This seems beneficial from a security standpoint > > Pasting into a sh

Re: [dev] [st] Hardening bracketed paste mode

2025-05-12 Thread Vincent Lefevre
On 2025-05-12 11:10:03 +0200, Vincent Lefevre wrote: > On 2025-05-10 15:49:20 +0100, Andrew Mass wrote: > > One seemingly simple way to prevent this would be to sanitize / > > disallow pasting buffers that contain this exact sequence. If > > bracketed paste mode is active, it seems incorrect to me

Re: [dev] [st] Hardening bracketed paste mode

2025-05-12 Thread Vincent Lefevre
On 2025-05-10 15:49:20 +0100, Andrew Mass wrote: > One seemingly simple way to prevent this would be to sanitize / > disallow pasting buffers that contain this exact sequence. If > bracketed paste mode is active, it seems incorrect to me to allow > writing an "early" end sequence. > > I believe so