Files
openclaw/src/transcripts
Yuval Dinodia 6ff963eb46 fix(transcripts): imported text can inject terminal escapes through transcripts show (#110060)
* fix(transcripts): imported text can inject terminal escapes through transcripts show

Imported transcript text, speaker labels, and session titles were rendered
into summary.md unsanitized, and openclaw transcripts show writes that file
directly to stdout, so a transcript could clear the terminal or spoof
colored status text. Sanitize external strings with the terminal-core
sanitizer when the summary is built, so summary.json, summary.md, and the
CLI output stay free of control bytes while transcript.jsonl keeps the raw
capture.

* fix(transcripts): protect terminal output boundaries

* fix(transcripts): keep canonical session identity separate from terminal presentation

* fix(transcripts): escape C1 control characters in transcripts json output
2026-07-18 20:20:13 -06:00
..