Keep ESC control characters in the message body

Open johslarsen opened this issue 1 year ago • 1 comments

In order to bring back support for ANSI colored HTML renderings etc.

Fixes #1679

Sep 05 '24 15:09 johslarsen

I addition to the minor code comment, I am not sure this is a great idea; I added some thoughts to the original discussion in #1679.

Sep 06 '24 16:09 lfos

As an alternative to what I suggested in #1679, we could try to allowlist certain escape characters; e.g., those that change color and basic formatting. That said, we'd need to be quite careful with what we allow to ensure there's no security issue.

Jul 30 '25 16:07 lfos

Proposed secure alternative to this PR: #1697

Jul 30 '25 17:07 lfos