ayo/kitty
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow only printable ascii in echo

Browse source
This commit is contained in:
Kovid Goyal 2023-11-06 21:28:25 +05:30
parent bd5fcb00e0
commit a6f13a64dc
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
kitty/window.py
View file

@ -1194,7 +1194,9 @@ def handle_remote_cmd(self, cmd: str) -> None:
def handle_remote_echo(self, msg: str) -> None:
from base64 import standard_b64decode
data = standard_b64decode(msg)
data = re.sub(rb'[^a-zA-Z0-9]', b'', data)
# ensure we are not writing any control char back as this can lead to command injection on shell prompts
# Any bytes outside the printable ASCII range are removed.
data = re.sub(rb'[^ -~]', b'', data)
self.write_to_child(data)
def handle_remote_ssh(self, msg: str) -> None: