Bug 513274

Summary: Please make OSC52 support configurable and opt-in
Product: [Applications] konsole Reporter: sergeyprotserovca
Component: copy-pasteAssignee: Konsole Bugs <konsole-bugs-null>
Status: REPORTED ---    
Severity: wishlist    
Priority: NOR    
Version First Reported In: 25.08.3   
Target Milestone: ---   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description sergeyprotserovca 2025-12-13 00:50:02 UTC
As of https://bugs.kde.org/show_bug.cgi?id=372116 and https://invent.kde.org/utilities/konsole/-/commit/9f7a2b846afbf3d34d10c224a9f3b32ce7aa1379, Konsole supports OSC52 write-only access, with read access intentionally left disabled due to security concerns.

I believe write-only access also comes with certain security shortcomings. For example, I may be connected to an untrusted machine via SSH, and as I copy something innocuous to subsequently paste it in my main machine, something malicious is written to the clipboard via OSC52, and malicious contents get pasted (and potentially executed, depending on the contents and the paste target).

I wonder if it would be possible to make OSC52 write-only access (currently enabled and non-configurable) configurable and opt-in?
Comment 1 sergeyprotserovca 2025-12-13 00:58:01 UTC
I checked Alacritty and Ghostty, and both support fine-grained configuration of copy and paste via OSC52: https://alacritty.org/config-alacritty.html#s70, https://ghostty.org/docs/config/reference#clipboard-read