There are several terminal codes that perform actions on the client, if the terminal impliments them. Even just the code that changes the window title could ev

There are several terminal codes that perform actions on the client, if the terminal impliments them. Even just the code that changes the window title could even possibly be a security risk. But the mother of all, in commercial terminals it's even a critical feature to have an escape code that literally executes an arbitrary string sent from the host to be executed on the client. Usually just to launch a browser or local document viewer, but could be anything. I used it to scan and upload documents from a scanner attached to the users pc back to the host for instance. In years past it would be used to launch excel etc before pretty much everything became doable over the net in a browser.