File xterm-disallow-window-and-fonts-ops.patch of Package xterm

Overview Repositories Revisions Requests Users Attributes Meta

File xterm-disallow-window-and-fonts-ops.patch of Package xterm (Revision 64a4a38ae3139626324fe09b2b317676)

Currently displaying revision 64a4a38ae3139626324fe09b2b317676 , Show latest

--- XTerm.ad
+++ XTerm.ad
@@ -209,6 +209,11 @@
 ! Alternatively,
 !*on2Clicks: regex [[:alpha:]]+://([[:alnum:]!#+,./=?@_~-]|(%[[:xdigit:]][[:xdigit:]]))+
 
+! Security: Disallow operations that might allow raw text being pasted to xterm to
+! execute code.
+*allowWindowOps:	false
+*allowFontOps:		false
+
 !! We want a 8bit clean xterm
 *eightBitInput:        true
 *eightBitOutput:       true
--- xterm.man
+++ xterm.man
@@ -1449,7 +1449,7 @@
 .TP
 .B "allowFontOps (\fPclass\fB AllowFontOps)"
 Specifies whether control sequences that set/query the font should be allowed.
-The default is ``true.''
+The default is ``false.''
 .TP 8
 .B "allowSendEvents (\fPclass\fB AllowSendEvents)"
 Specifies whether or not synthetic key and button events (generated using
@@ -1473,7 +1473,7 @@
 .B "allowWindowOps (\fPclass\fB AllowWindowOps)"
 Specifies whether extended window control sequences (as used in dtterm)
 should be allowed.
-The default is ``true.''
+The default is ``false.''
 .TP 8
 .B "altIsNotMeta (\fPclass\fB AltIsNotMeta\fP)"
 If ``true'', treat the Alt-key as if it were the Meta-key.

Places

File xterm-disallow-window-and-fonts-ops.patch of Package xterm (Revision 64a4a38ae3139626324fe09b2b317676)

Places