35 lines
1.1 KiB
Diff
35 lines
1.1 KiB
Diff
|
--- XTerm.ad
|
||
|
+++ XTerm.ad
|
||
|
@@ -209,6 +209,11 @@
|
||
|
! Alternatively,
|
||
|
!*on2Clicks: regex [[:alpha:]]+://([[:alnum:]!#+,./=?@_~-]|(%[[:xdigit:]][[:xdigit:]]))+
|
||
|
|
||
|
+! Security: Disallow operations that might allow raw text being pasted to xterm to
|
||
|
+! execute code.
|
||
|
+*allowWindowOps: false
|
||
|
+*allowFontOps: false
|
||
|
+
|
||
|
!! We want a 8bit clean xterm
|
||
|
*eightBitInput: true
|
||
|
*eightBitOutput: true
|
||
|
--- xterm.man
|
||
|
+++ xterm.man
|
||
|
@@ -1449,7 +1449,7 @@
|
||
|
.TP
|
||
|
.B "allowFontOps (\fPclass\fB AllowFontOps)"
|
||
|
Specifies whether control sequences that set/query the font should be allowed.
|
||
|
-The default is ``true.''
|
||
|
+The default is ``false.''
|
||
|
.TP 8
|
||
|
.B "allowSendEvents (\fPclass\fB AllowSendEvents)"
|
||
|
Specifies whether or not synthetic key and button events (generated using
|
||
|
@@ -1473,7 +1473,7 @@
|
||
|
.B "allowWindowOps (\fPclass\fB AllowWindowOps)"
|
||
|
Specifies whether extended window control sequences (as used in dtterm)
|
||
|
should be allowed.
|
||
|
-The default is ``true.''
|
||
|
+The default is ``false.''
|
||
|
.TP 8
|
||
|
.B "altIsNotMeta (\fPclass\fB AltIsNotMeta\fP)"
|
||
|
If ``true'', treat the Alt-key as if it were the Meta-key.
|