https://bugs.kde.org/show_bug.cgi?id=513274

            Bug ID: 513274
           Summary: Please make OSC52 support configurable and opt-in
    Classification: Applications
           Product: konsole
      Version First 25.08.3
       Reported In:
          Platform: Fedora RPMs
                OS: Linux
            Status: REPORTED
          Severity: wishlist
          Priority: NOR
         Component: copy-paste
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

As of https://bugs.kde.org/show_bug.cgi?id=372116 and
https://invent.kde.org/utilities/konsole/-/commit/9f7a2b846afbf3d34d10c224a9f3b32ce7aa1379,
Konsole supports OSC52 write-only access, with read access intentionally left
disabled due to security concerns.

I believe write-only access also comes with certain security shortcomings. For
example, I may be connected to an untrusted machine via SSH, and as I copy
something innocuous to subsequently paste it in my main machine, something
malicious is written to the clipboard via OSC52, and malicious contents get
pasted (and potentially executed, depending on the contents and the paste
target).

I wonder if it would be possible to make OSC52 write-only access (currently
enabled and non-configurable) configurable and opt-in?

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to