/staff strips quotation marks.
Issue #340
resolved
Using the /staff command will remove any "
from the message. However messages sent to staff from irc keep their quotation marks.
Comments (2)
-
-
- changed status to resolved
exec_msgstaff: Fix shell injection
Also wait for process to exit.
Resolves issue
#340and should resolve#351→ <<cset 56bb32f71dcf>>
- Log in to comment
There are more weird behaviours.
A single backslash yields double quotes. Two backslashes yields a backslash. Three backslashes yields a backslash and double quotes. Four backslashes has two double quotes, and so forth.
There's also whatever I did here...
Looking for more oddities!