not receiving "OK to paste %d lines at shell prompt?" warning

OSX: 10.11.5 iTerm2: 2.1.4 iterm2.plist

I am not receiving this warning when pasting text/commands that contain new lines. For example, pasting the text from the clickjacking demo linked in this repository should warn me about pasting a command with newline(s), but instead it just executes:

$ echo "evil"

evil

I've looked through the preference and don't see anywhere to enable the warning and fall into lines 493-509 in iTermPasteHelper.m. I'm not familiar with objective-c, but a quick glance at the code is leading me to believe that there is some Advanced setting "suppressMultilinePasteWarningWhenPastingOneLineWithTerminalNewline" that controls this behavior. The only "Advanced" settings menu I see under iTerm>>Preferences is under the "Profiles" heading, and there are only three settings there for "Triggers", "Smart Selection", and "Semantic History".

Am I missing something, or was this warning/setting removed, or is this a bug?

There's no advanced pref for this, but you're the second person to complain so I will add one soon.

defaults delete com.googlecode.iterm2 NoSyncDoNotWarnBeforeMultilinePaste

will do the job.

Milestone changed to %3.0.1

I hope this didn't come across as complaining. I actually really want this warning to show in order to avoid pastejacking attacks. Would the new advanced preference allow me to enable this warning, or should it already be working out-of-the-box? If the latter, I'm wondering why I am not currently receiving the warning shown in the code and mentioned by others online. Thanks for the assistance, and the awesome software.

EDIT: Maybe my original issue description was misleading. I am not trying to suppress the warning, but rather wonder how to enable the warning, as it is currently being suppressed somehow on my system.

You should receive it out of the box. If you don't it could be because shell integration isn't installed or working properly. Do you see a blue arrow to the left of your shell prompt?

Maybe that's the issue. I see no blue arrow, just:

user@host ~/path/to/cwd

$

So, I followed the instructions here, but still no blue arrow, and the issue persists. It's also worth noting that there is/was no " iTerm2>Install Shell Integration" menu option as noted in the instructions.

I'm using the solarized theme with its custom .bash_profile, if that is of any consequence.

@adreyp Install the latest beta version, then you can install shell integration. The prompt you're asking about does not exist in 2.1.x which is what I guess you have.

Thanks so much George. Coincidentally, right as I was reading your email I got a notification that an new update was available for iTerm, so I went ahead and installed it. The blue arrow appeared, as you mentioned. I then installed the shell integrations, and it is now warning me as I was hoping it would. Thanks again, I'm really enjoying the software.

Status changed to closed