[stormyfacts] factoids can send CTCP messages

Bug #990915 reported by m4v
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu IRC Bots
Fix Released
Medium
m4v

Bug Description

Factoids can be created with \x01 chars and might send CTCP commands to the channel. This is only an issue if users are allowed to create factoids without review.

Exio4 !noexiste : ACTION test
kubot Recordaré 'noexiste'.
init !noexiste
 * kubot test
init eso basicamente, expande
init !olvidar noexiste
kubot Olvidaré 'noexiste'.
Exio4 !noexiste : VERSION
kubot 'noexiste' cambió, lo recordaré.
init m4v: te animas a probar el facto?
init xDd
m4v !noexiste
-- CTCP solicitado por kubot: VERSION (bloqueado)

Tags: stormyfacts
m4v (m4v)
Changed in ubuntu-bots:
status: Triaged → Fix Committed
m4v (m4v)
Changed in ubuntu-bots:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.