Debian security update to xterm

insecure: boolean
Enables "insecure" mode. Rxvt-unicode offers some escape sequences that echo
arbitrary strings like the icon name or the locale. This could be abused if
somebody gets 8-bit-clean access to your display, whether through a mail
client displaying mail bodies unfiltered or through write(1) or any other
means. Therefore, these sequences are disabled by default. (Note that many
other terminals, including xterm, have these sequences enabled by default,
which doesn't make it safer, though).

You can enable them by setting this boolean resource or specifying -insecure
as an option. At the moment, this enables display-answer, locale, findfont,
icon label and window title requests.