I mentioned the problem on oss-security in 2016: http://openwall.com/lists/oss-security/2016/04/21/9 http://openwall.com/lists/oss-security/2016/04/21/9 (I th

I mentioned the problem on oss-security in 2016: http://openwall.com/lists/oss-security/2016/04/21/9 http://openwall.com/lists/oss-security/2016/04/21/9 (I think my claim that git escapes some control characters is incorrect; it's less that does it.) > Same response, “it’s the pager’s job,” in that case. It can't be the pagers job, because pager has no way to distingiush from escapes generated by git (to make things colorful) from malicious escapes.