config.def.h: add an option allowwindowops, by default off (secure)

[st.git] / st.c

diff --git a/st.c b/st.c
index 2d901ab66e2436c95906d5edeb77ee05e7ae5058..ef8abd5d04928739f2bb4004e26b6c82da8098b6 100644 (file)
--- a/st.c
+++ b/st.c
@@ -1861,7 +1861,7 @@ strhandle(void)
                                xsettitle(strescseq.args[1]);
                        return;
                case 52:
-                       if (narg > 2) {
+                       if (narg > 2 && allowwindowops) {
                                dec = base64dec(strescseq.args[2]);
                                if (dec) {
                                        xsetsel(dec);