the point is it's a feature, not an exploit. control and escape codes are a thing for a reason. it's worse with web stuff though... and it's a real vector. ht

the point is it's a feature, not an exploit. control and escape codes are a thing for a reason. it's worse with web stuff though... and it's a real vector. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=terminal+escape https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=terminal+es... https://packetstormsecurity.com/files/162518/AWS-CloudShell-Terminal-Escape-Injection-Remote-Code-Execution.html https://packetstormsecurity.com/files/162518/AWS-CloudShell-... https://nvd.nist.gov/vuln/detail/CVE-2017-0899 https://nvd.nist.gov/vuln/detail/CVE-2017-0899 https://github.com/InfosecMatter/terminal-escape-injections https://github.com/InfosecMatter/terminal-escape-injections