* Security fix: prevent screen scraping Problem ------- DECRQCRA was added in 6cbb3ba43, for 9702d1cf5 (esctest integration) Sunday, March 17 2019. Six days later, March 23 2019, although esctest was removed in c93f967bc, DECRQCRA remained enabled by default for all WezTerm releases since. March 2023, @j4james mentioned WezTerm has this option enabled by default https://github.com/microsoft/terminal/issues/14974, "some people consider it a security risk" September 2023, https://dgl.cx/2023/09/ansi-terminal-security#cursor-checksum article writes, "using DECRQCRA [..] potential attack here is reading what is displayed on the terminal before a user SSHes to a remote system." By switching to "alternate screen", it also possible to recover last TUI display, such as contents of the file last opened in an editor. Example CLI script scrapes screens '0' and '1' of WezTerm, https://github.com/jquast/blessed/blob/master/bin/screen-scrape.py Solution -------- Disable https://vt100.net/docs/vt510-rm/DECRQCRA.html by default, may be re-enabled by configuration. --- Refs: https://github.com/wezterm/wezterm/pull/7701 Co-authored-by: Wez Furlong <wez@wezfurlong.org>