xterm/xterm-disallow-window-and-fonts-ops.patch
OBS User autobuild 79649d882f Accepting request 30090 from X11:terminals
Copy from X11:terminals/xterm based on submit request 30090 from user msmeissn

OBS-URL: https://build.opensuse.org/request/show/30090
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/xterm?expand=0&rev=35
2010-01-21 10:48:40 +00:00

30 lines
986 B
Diff

Index: XTerm.ad
===================================================================
--- XTerm.ad.orig
+++ XTerm.ad
@@ -252,6 +252,11 @@
! Alternatively,
!*on2Clicks: regex [[:alpha:]]+://([[:alnum:]!#+,./=?@_~-]|(%[[:xdigit:]][[:xdigit:]]))+
+! Security: Disallow operations that might allow raw text being pasted to xterm to
+! execute code.
+*allowWindowOps: false
+*allowFontOps: false
+
!! We want a 8bit clean xterm
*eightBitInput: true
*eightBitOutput: true
Index: xterm.man
===================================================================
--- xterm.man.orig
+++ xterm.man
@@ -1499,7 +1499,7 @@ The default is \*(``true.\*(''
.TP
.B "allowFontOps (\fPclass\fB AllowFontOps)"
Specifies whether control sequences that set/query the font should be allowed.
-The default is \*(``true.\*(''
+The default is \*(``false.\*(''
.TP 8
.B "allowSendEvents (\fPclass\fB AllowSendEvents)"
Specifies whether or not synthetic key and button events (generated using