Hacker News new | ask | show | jobs
by thom_nic 3961 days ago
So to be clear, the article isn't suggesting that e.g. github will interpret the ANSI escape sequences, but they will be when you `git log` from a command line, right?
2 comments

Correct, this is an ANSI escape code[1] interpreted by terminals, not XSS.

[1] https://en.wikipedia.org/wiki/ANSI_escape_code

We cannot know (in principle) what GitHub does with data streams sent their way, but in the case of the blinking, the target is your terminal. It will interpret and “execute” (by modifying display) any text it is given.