Re: bracketed paste mode in xterm and urxvt

[Yuri D'Elia <wavexx@xxxxxxxxxx>]

On 06/03/2015 02:06 PM, Mikael Magnusson wrote:
> It's probably worth noting that 'safe-paste' is a bad name for this,
> since the pasted text can include the end-paste escape code, causing
> the rest of the paste to appear to the shell as typed by the user.
> 
> This page has an example attack against the plugin,
> https://thejh.net/misc/website-terminal-copy-paste
> 
> Hm, seems newer xterm prohibits pasting raw escape codes, so if you
> have one of those versions, you are safe.

Not urxvt though. I just submitted a patch:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787628