Re: [vim/vim] feat(osc52) clipboard (PR #20896)

chrisbra left a comment (vim/vim#20896)

thanks for working on this and thanks for careful thinking of exfiltration attacks. Assuming enabling osc52 handling does not add much code for vim tiny, wouldn't it be much more useful to always enable this for tiny builds, instead of giving distributions the choice to disable it for their own tiny vim? It would still have to be explicitly enabled by users during runtime, and I don't see why distributions would need to disable it.

On another point, how well is OSC52 actually supported by terminals nowadays? I read that writing to the clipboard is even more widely supported than reading the clipboard by terminals (for the same security concerns)? Is that true?

And finally, I am not so sure the `$VIMOSC52` is a good choice. I think we should instead make use of `:set clipmethod` even in tiny mode, so that users can selectively enable and disable the feature as they need it. This means you could set it interactively or via a command line argument `--cmd 'set clipmethod=osc52'` in case you are not allowed to add config files on remote servers or containers. However I am not sure how complicated would it be to just promote the `clipmethod=osc52` for tiny builds and how much additional code this would add. (This likely means decoupling `HAVE_CLIPMETHOD` from the `FEAT_EVAL` feature, since the option currently isn't compiled into tiny however I'm unsure about the cost of.)

-- 
Reply to this email directly or view it on GitHub:
https://github.com/vim/vim/pull/20896#issuecomment-5150994939
You are receiving this because you are subscribed to this thread.

Message ID: <vim/vim/pull/20896/[email protected]>

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups "vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/vim_dev/vim/vim/pull/20896/c5150994939%40github.com.