Skip to content

Commit

Permalink
README.org: add details on pasting text from unsafe site
Browse files Browse the repository at this point in the history
The links (to an old version however) already were in the source code.
  • Loading branch information
maxnikulin committed Oct 29, 2021
1 parent dc570f1 commit 54e56d4
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 1 deletion.
6 changes: 6 additions & 0 deletions README.org
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,12 @@ Other options are tried if there is no "title" attribute:
The extension tries to protect you from control characters in the text
that may cause inserting of other text than you expect. There is no
guarantee that such protection is reliable, so beware malicious sites.
It seems modern bash versions have "bracketed paste" enabled by default
to mitigate the issue. See Stack Exchange question from the security hub
"[[https://security.stackexchange.com/questions/39118/how-can-i-protect-myself-from-this-kind-of-clipboard-abuse][How can I protect myself from this kind of clipboard abuse?]]"
or recommendations to web developers in Security Considerations section
of Flask framework documentation
[[https://flask.palletsprojects.com/en/2.0.x/security/#copy-paste-to-terminal][Copy/Paste to Terminal]].

At first I found
[[https://addons.mozilla.org/firefox/addon/copy-element-s-text/][Copy Element's text]]
Expand Down
2 changes: 1 addition & 1 deletion acp_background.js
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ async function acpExecuteContentScript({tabId, frameId, targetElementId}) {
//
// It is better to avoid control characters since they
// could be accidentally pasted into terminal without proper protection.
// https://flask.palletsprojects.com/en/1.1.x/security/#copy-paste-to-terminal
// https://flask.palletsprojects.com/en/2.0.x/security/#copy-paste-to-terminal
// Copy/Paste to Terminal (in Security Considerations)
// https://security.stackexchange.com/questions/39118/how-can-i-protect-myself-from-this-kind-of-clipboard-abuse
// How can I protect myself from this kind of clipboard abuse?
Expand Down

0 comments on commit 54e56d4

Please sign in to comment.