51–60 of 70 posts
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
Isn't this like any other hyperlink? https://good.com
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
fwiw, in kitty you can configure it [1] to confirm opening a link: allow_hyperlinks ask [1]
Earlier quoted context omitted.
Yeah, but it’s only browsers that render hyperlinks from untrusted sources…unless you’re saying you often download random executables and then click their hyperlinks?
For http / https links the OS would open the browser for it. For other protocol browsers would not understand it.
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
I really think this is a security disaster waiting to happen, landing right in time for all the agentic terminal apps: printf '\e]8;;http://evil.com\e\\https://good.com\e]8;;\e\\\n' The next step would be to embedd a full javascript VM in the terminal and a CSS engine.
Isn't this like any other hyperlink? https://good.com
The use-cases provided seem to all just be more or less "it's convenient and looks good", which is the last thing I care about in a situation like that.
Am I reading it wrong or is this seriously saying "this is secure because it's like web browsing"?
I don't want things to be silo'd just because I run them in the GUI Vs the terminal.