2026-09-08 22:48 UTC
It actually also allows other programs to execute code through Kitty, example if you cat a file that has escapes in it. It would allow Kitty to execute that code when you never intended it… But like why does kitty even have that as a feature? But they’ve since updated the config to be set to socket only instead of yes
Replies (3)
-
@dizuane@sh.itjust.works 2026-09-08 23:56
Having the feature seems pretty in line with the general Linux philosophy. Let the user decide, even if that means they screw it up. Same reason you can muck up an install by just running updates on storage that doesn’t have enough room to do so. It’s up to the end user to understand, verify, and choose to execute.
-
@eager_eagle@lemmy.world 2026-09-09 02:20
yes, I get that and it’s a bad default, but not RCE like the post says
-
@wuphysics87@lemmy.ml 2026-09-09 02:25
Would you call that a Kitty cat? 🐈