4 ms·
One of the people active in the thread concludes that: > The right approach if you're worried about these vectors is: never paste things off internet sites you
by skibz 7y ago
One of the people active in the thread concludes that:
> The right approach if you're worried about these vectors is: never paste things off internet sites you don't trust directly into your terminal.
I'd like to add that disabling JavaScript also seems like a sensible option, unless that prevents the site from rendering, of course.
- vbrandl 7y agoDisabling JS doesn't help in this case. This post shows that it is possible to put unwanted text in your c&p buffer without using JS: http://thejh.net/misc/website-terminal-copy-paste http://thejh.net/misc/website-terminal-copy-paste
- inetknght 7y agoLeading that page in Firefox reader mode seems harmless enough...
- danShumway 7y agoRemembering to click a button that strips the fonts/CSS out every page I read seems a lot harder to me than remembering to always paste into a blank document before my terminal. Reader mode isn't even available for every site. That being said, yes, stripping CSS, fonts, and Javascript would fix the issue.
- jwilk 7y agoYou would also have to disable images, because they could hide text in the alt attribute. (The reader mode doesn't to it for you.)