News for hackers. Stuff that matters.
Re:Show HN: Tap curl in your editor before it gets to sh by JadeNB on Sunday November 13, 2016 @10:52AM (#12943882)
Bracketed paste mode can still be broken by a malicious web-site: https://thejh.net/misc/website-terminal-copy-paste . Does this solution have the same vulnerability?
Re:Show HN: Tap curl in your editor before it gets to sh by semi-extrinsic on Sunday November 13, 2016 @12:28PM (#12944415)
Depends on the terminal emulator you're using, I believe. It (and not zsh) needs to filter out escape sequences.