Update utils/executor.py

utils/executor.py

@@ -1,6 +1,8 @@
 import os
 import asyncio
 import re
+import html # ⚡ FIX: Added html module to sanitize output
+
 from config import USER_CWD, ACTIVE_PROCESSES
 
 # Regex Blacklist: Catches dangerous base commands regardless of spacing or flags
@@ -52,7 +54,8 @@ async def run_shell_command_live(client, message, cmd: str, status_msg, timeout:
                 # Rate limit edits to prevent API flood
                 current_time = asyncio.get_event_loop().time()
                 if current_time - last_edit_time > 2.0:
-                    display_text = output_buffer[-3500:] # Stay under Telegram limits
+                    # ⚡ FIX: Escape HTML characters to prevent Telegram API crash
+                    display_text = html.escape(output_buffer[-3500:]) 
                     try:
                         await status_msg.edit_text(f"<b>$</b> <code>{cmd}</code>\n<pre>{display_text}</pre>", parse_mode="HTML")
                         last_edit_time = current_time
@@ -86,4 +89,6 @@ async def run_shell_command_live(client, message, cmd: str, status_msg, timeout:
         await message.reply_document(filename, caption=f"<b>Command:</b> <code>{cmd}</code>", parse_mode="HTML")
         os.remove(filename)
     else:
-        await status_msg.edit_text(f"<b>$</b> <code>{cmd}</code>\n<pre>{output_buffer}</pre>", parse_mode="HTML")
+        # ⚡ FIX: Escape HTML characters for the final output as well
+        safe_final = html.escape(output_buffer)
+        await status_msg.edit_text(f"<b>$</b> <code>{cmd}</code>\n<pre>{safe_final}</pre>", parse_mode="HTML")