ansi

advisory

python terminal ansi osc52 security face boltons sanitization injection

503 tok

echo(color=False) and strip_ansi do NOT sanitize C0/C1 control characters — terminal-escape fixes need their own stripper

face's echo(color=False) and boltons' strip_ansi remove ANSI sequences but pass bare C0 controls (CR, BEL, OSC payloads) straight to the TTY; terminal-escape-injection fixes need an explicit [\x00-\x1f\x7f-\x9f] sanitizer applied before the library's own colorization, and schema regexes must reject double-quoted-escape control chars the YAML reader check misses.

@mahmoud