General Security / Feature Request: Option to disable Custom Escape Codes / Sequences
Information
Version: iTerm 2.9v20160219
Problem
iTerm2 is supporting a variety of custom escape codes/sequences, some of which exist for compatibility, others for extra features. Those extra features can pose a security issue through escape codes/sequence injection (e.g., see https://www.proteansec.com/linux/blast-past-executing-code-terminal-emulators-via-escape-sequences/, http://www.openwall.com/lists/oss-security/2015/08/12/10, http://unix.stackexchange.com/questions/73713/how-safe-is-it-to-cat-an-arbitrary-file, or http://www.securityfocus.com/archive/1/archive/1/508830/100/0/threaded), for example when simply cat
-ing a log file on a remote server.
This is further amplified by now also rendering images, which are known to be a vast source for exploitable vulnerabilities (e.g., see image libraries vulnerabilities found via AFL, http://lcamtuf.coredump.cx/afl/).
Solution
Add an option to disable parsing of custom escape codes/sequences.