On Wed, 3 Jan 2024 01:21:27 +0100
Martin Buck <[email protected]> wrote:

> I thought the main idea behind bracketed paste is the possibility to
> review what you're pasting before it takes effect as Karl described
> in the other email in this thread. I can see use in having this on by
> default, but I'm not so sure about the "don't execute bound
> functions" part of it.

The "don't execute bound functions" part seems the part that was
intended to be, and IMO is, the part that really enhances security.
(I have a feeling the "extra review" part came along for the ride.)

> So the patch that Karl describes sounds very
> useful to me. But then, I don't have the slightest idea about how
> bracketed paste is imlpemented internally and I understand that what
> I'm asking for might actually be quite tricky to implement.

My patch is imaginary.  It did turn out to be a lot harder than I
thought and there's no telling when or if I'll get back to it.

Regards,

Karl <[email protected]>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein

Reply via email to