Bug 435548 - Konsole clear scrollback and reset (ctrl+shft+k) disables bracketed-paste
Summary: Konsole clear scrollback and reset (ctrl+shft+k) disables bracketed-paste
Status: REPORTED
Alias: None
Product: konsole
Classification: Applications
Component: keyboard (show other bugs)
Version: 20.12.3
Platform: Other Linux
: NOR major
Target Milestone: ---
Assignee: Konsole Developer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-04-09 15:34 UTC by Gabriel Fernandes
Modified: 2021-04-09 15:34 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
Left before clearing konsole - right after clearing konsole (37.09 KB, image/png)
2021-04-09 15:34 UTC, Gabriel Fernandes
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gabriel Fernandes 2021-04-09 15:34:32 UTC
Created attachment 137452 [details]
Left before clearing konsole - right after clearing konsole

SUMMARY
Some shells (bash, zsh), and readline, have a mode where pasted text is not run
even if they contain newlines. This is a good thing if you are copying and pasting
commands from websites, where might contain hidden text that could be used to take
control of your system.
This works in Konsole, until you use the ctrl+shft+k shortcut, after you use it,
you might be tricked into thinking that it's okay to paste anything in your shell,
as nothing will be executed before you hit enter, that gives false sense of security to the user.

See:
http://thejh.net/misc/website-terminal-copy-paste
for an example of hidden text that can be embedded in websites.

STEPS TO REPRODUCE
1. Enable bracketed-paste in your shell
2. Clear scrollback and reset konsole (ctrl+shft+k)
3. Paste text with multiple lines

OBSERVED RESULT
Multi-line command gets executed.

EXPECTED RESULT
Multi-line command waits for the user to review
what was pasted before executing anything.