urxvt-confirm-paste(1) RXVT-UNICODE urxvt-confirm-paste(1)

NAME

confirm-paste - ask for confirmation before pasting control
characters

DESCRIPTION

Displays a confirmation dialog when a paste containing control
characters is detected. The user can choose "y" to either paste a
sanitized variant where all control characters are removed, "p" to
paste the string unmodified or "n" to drop the paste request
completely.

This is mostly meant as a defense-in-depth mechanism to protect
against the common web browser bug of you selecting some text but the
browser pasting a completely different text, which has some attack
potential.

It can also be useful to prevent you from accidentally pasting large
amounts of text.

DETAILS

If a string containing unicode control characters (specifically
U+0000 .. U+001F currrently) is pasted into the terminal, this
extension will ask whether it should be pasted. Strings without
control characters get pasted without prompt.

When a sanitized version is pasted (choice "y"), then contiguous
sequences of those control characters will be replaced by a single
spaces.

The exact detection and sanitization algorithm is subject to change
in future versions.

9.31 2023-10-24 urxvt-confirm-paste(1)