config.def.h: add an option allowwindowops, by default off (secure)

[st.git] / st.c

diff --git a/st.c b/st.c
index 2d901ab..ef8abd5 100644 (file)
--- a/st.c
+++ b/st.c
@@ -1861,7 +1861,7 @@ strhandle(void)
                                xsettitle(strescseq.args[1]);
                        return;
                case 52:
-                       if (narg > 2) {
+                       if (narg > 2 && allowwindowops) {
                                dec = base64dec(strescseq.args[2]);
                                if (dec) {
                                        xsetsel(dec);