My friend and I are developing a screenshot tool for Linux where the screenshot can be saved into a clipboard by using an external tool like xclip or wl-clipboard. Since there are even more clipboard managers (as listed in the arch wiki for example) we'd like to add an entry in our config file so that the user can decide on his own which and how the clipboard manager should be executed/used. It would for example as follows for for xclip:
clip_man = ["xclip"]
clip_man_args = ["-selection", "primary", "-t", "image/png"]
and our code would look like this (pseudocode):
Now we're wondering if this is fine or if this is actually a security concern since someone just need to replace the config file with a malicious program in
Should we search for another solution or is this design decision fine?