Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

There's a million reasons why you shouldn't "cat untrusted READMEs".


Please do share those million reasons.

So far I can only think of 1: term vulnerabilities due to ANSI escape sequence parser bugs. And that’s exactly the reason I’m suggesting OSC8 should be off by default.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github