Skip to content

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Sign in / Register
iterm2
iterm2
  • Project
    • Project
    • Details
    • Activity
    • Cycle Analytics
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Charts
    • Locked Files
  • Issues 1,564
    • Issues 1,564
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Charts
  • Create a new issue
  • Commits
  • Issue Boards
  • George Nachman
  • iterm2iterm2
  • Issues
  • #5303

Closed
Open
Opened Nov 02, 2016 by ewaher@ewaher 
  • Report abuse
  • New issue
Report abuse New issue

undesirable domain lookup behavior

Thanks for filing an issue! Please answer the questions below so I can help you.

  • iTerm2 version: Build 3.0.10
  • OS version: OS X 10.11.16

Detailed steps to reproduce the problem:

  1. Turn on Preferences->Pointer-> ⌘-Click Opens Filename/URL (Semantic History)
  2. launch an iterm window, type google.com
  3. Holding ⌘ key, highlight google.com text.

What happened: Once you hover over the url while holding ⌘ key, iterm issues a DNS query for that domain highlighted.

What should have happened:

Domains should not be queried through DNS to determine whether they are highlighted in iTerm. The current behavior can compromise a security analyst or incident responders investigation by querying a URL unintentionally while in iterm. Often hackers/attackers monitor their attacking infrastructure for such investigators and these types of queries coming from a targets network.

While the user experience will be less than ideal, attempting to follow a URL in iterm which does not resolve is no fault of iterm, and could even introduce unexplained behavior when a bad domain name does not become "clickable".

Thanks for considering this request.

Related issues

Assignee
Assign to
Epic
None
Milestone
None
Assign milestone
Time tracking
None
Due date
No due date
0
Labels
None
Assign labels
  • View project labels
Reference: gnachman/iterm2#5303