Comment by sorz

Lots of issues follow the pattern "ANSI escape code inside untrusted text". It feels like XSS but for terminal.