mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-22 04:51:41 +00:00
* fix(transcripts): imported text can inject terminal escapes through transcripts show Imported transcript text, speaker labels, and session titles were rendered into summary.md unsanitized, and openclaw transcripts show writes that file directly to stdout, so a transcript could clear the terminal or spoof colored status text. Sanitize external strings with the terminal-core sanitizer when the summary is built, so summary.json, summary.md, and the CLI output stay free of control bytes while transcript.jsonl keeps the raw capture. * fix(transcripts): protect terminal output boundaries * fix(transcripts): keep canonical session identity separate from terminal presentation * fix(transcripts): escape C1 control characters in transcripts json output