[konsole] [Bug 89299] prevent paste of newline characters

Pedro V bugzilla_noreply at kde.org
Sun Aug 13 21:21:33 BST 2023


https://bugs.kde.org/show_bug.cgi?id=89299

Pedro V <voidpointertonull+bugskdeorg at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |voidpointertonull+bugskdeor
                   |                            |g at gmail.com

--- Comment #71 from Pedro V <voidpointertonull+bugskdeorg at gmail.com> ---
(In reply to Gabriel Fernandes from comment #61)
> I found that if you clear konsole with (ctrl + shift + k) bracketed-paste
> doesn't work anymore in the now-cleared terminal. Unless you reset the
> terminal.

I wondered why was this bug report still open, but ouch, could reproduce this
problem.

For other complaints, I'm generally not sure there will be ever a perfect
balance between convenient and secure text passing when the whole communication
is in a stream of text including control data.
Regarding manual input sanitization, I'm not sure it's necessarily the
terminal's responsibility to fight everything that may be misinterpreted. For
example I'd deem it a quite important security improvement if programs would
need a privilege to interact with the clipboard if they are not actively being
interacted with, so if Klipper would be checked while Konsole is in the
foreground, there would be an implicit guarantee of not having a TOCTOU race
condition of the clipboard getting changed after check but before paste. Also
if the input would be copied from a trusted program, and nothing else would be
interacted with before switching to Konsole, then the clipboard content should
be known good data this way. May not be feasible on X11, but I do hope that
Wayland is headed this way.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the konsole-devel mailing list