GitLab

Thanks for filing an issue! Please answer the questions below so I can help you.

• iTerm2 version: Build 3.0.10
• OS version: OS X 10.11.16

Detailed steps to reproduce the problem:

1. Turn on Preferences->Pointer-> ⌘-Click Opens Filename/URL (Semantic History)
2. launch an iterm window, type google.com
3. Holding ⌘ key, highlight google.com text.

What happened: Once you hover over the url while holding ⌘ key, iterm issues a DNS query for that domain highlighted.

What should have happened:

Domains should not be queried through DNS to determine whether they are highlighted in iTerm. The current behavior can compromise a security analyst or incident responders investigation by querying a URL unintentionally while in iterm. Often hackers/attackers monitor their attacking infrastructure for such investigators and these types of queries coming from a targets network.

While the user experience will be less than ideal, attempting to follow a URL in iterm which does not resolve is no fault of iterm, and could even introduce unexplained behavior when a bad domain name does not become "clickable".

Thanks for considering this request.