After a quick search, I haven't been able to find lay risk assessments of the
PermitLocalCommand option in
Are there known vulnerabilities that allow arbitrary code execution on the local host (the client) associated with this option?
e.g., xterm escape sequences used to manipulate stdin.
Do any such vulnerabilities affect rxvt-unicode (without
This follows from other questions: