https://bugs.kde.org/show_bug.cgi?id=89299

Pedro V <voidpointertonull+bugskde...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |voidpointertonull+bugskdeor
                   |                            |g...@gmail.com

--- Comment #71 from Pedro V <voidpointertonull+bugskde...@gmail.com> ---
(In reply to Gabriel Fernandes from comment #61)
> I found that if you clear konsole with (ctrl + shift + k) bracketed-paste
> doesn't work anymore in the now-cleared terminal. Unless you reset the
> terminal.

I wondered why was this bug report still open, but ouch, could reproduce this
problem.

For other complaints, I'm generally not sure there will be ever a perfect
balance between convenient and secure text passing when the whole communication
is in a stream of text including control data.
Regarding manual input sanitization, I'm not sure it's necessarily the
terminal's responsibility to fight everything that may be misinterpreted. For
example I'd deem it a quite important security improvement if programs would
need a privilege to interact with the clipboard if they are not actively being
interacted with, so if Klipper would be checked while Konsole is in the
foreground, there would be an implicit guarantee of not having a TOCTOU race
condition of the clipboard getting changed after check but before paste. Also
if the input would be copied from a trusted program, and nothing else would be
interacted with before switching to Konsole, then the clipboard content should
be known good data this way. May not be feasible on X11, but I do hope that
Wayland is headed this way.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to