Re: [xterm] better support for editors

It isn't secure, in two ways:

You can construct a file so that if you "cat" it, paste data is sent to
xterm, followed by the paste command, which would then send the data right
to the shell prompt.  I'm looking for suggestions for this.

In one sense it's not so bad, because for public data like mail and news,
programs do not allow ESC sequences to be sent to the terminal.  Also I
remember actual terminals (real VT100s I think) which had this same problem
(answer back string), but there was a mode to disable it.

The second problem is this: XTerm will appear to lock up if you send ESC [ 1
y (if you cat a binary file which has it, for example).  I think this can be
fixed: I could change it so that every 8th character has to be an ESC,
otherwise the mode is aborted.
    

>"Dr. David Alan Gilbert" <[email protected]> wrote:

>Is this secure? It just seems that it allows a series of escape
>characters to insert an arbitrary string into the input buffer;
>or are there enough sequences which would let you do this anyway?

Joe