Re: Terminal escape sequences - the new XSS for admins?

[Florian Weimer <fw () deneb enyo de>]

* Steve Grubb:

> In my survey recently, Some emulators could set the window title;
> none of them supported reading the window title back to the command
> prompt. If you find one that does, it is one that is at risk.

Upstream xterm has other problematic window ops enabled by default.
Debian should disable all of them since xterm version 251-1, but this
is a downstream-specific change.  (Upstream documentation is also a
bit misleading, AFAICS.)