← Back to team overview

ubuntu-bots team mailing list archive

[Bug 990915] [NEW] [stormyfacts] factoids can send CTCP messages

 

Public bug reported:

Factoids can be created with \x01 chars and might send CTCP commands to
the channel. This is only an issue if users are allowed to create
factoids without review.

Exio4 !noexiste :  ACTION test
kubot Recordaré 'noexiste'.
init !noexiste
 * kubot test
init eso basicamente, expande
init !olvidar noexiste
kubot Olvidaré 'noexiste'.
Exio4 !noexiste :  VERSION
kubot 'noexiste' cambió, lo recordaré.
init m4v: te animas a probar el facto?
init xDd
m4v !noexiste
-- CTCP solicitado por kubot: VERSION (bloqueado)

** Affects: ubuntu-bots
     Importance: Medium
     Assignee: m4v (m4v)
         Status: Triaged


** Tags: stormyfacts

-- 
You received this bug notification because you are a member of Ubuntu
IRC Bots, which is subscribed to Ubuntu IRC Bots.
https://bugs.launchpad.net/bugs/990915

Title:
  [stormyfacts] factoids can send CTCP messages

Status in The official Ubuntu IRC bots:
  Triaged

Bug description:
  Factoids can be created with \x01 chars and might send CTCP commands
  to the channel. This is only an issue if users are allowed to create
  factoids without review.

  Exio4 !noexiste :  ACTION test
  kubot Recordaré 'noexiste'.
  init !noexiste
   * kubot test
  init eso basicamente, expande
  init !olvidar noexiste
  kubot Olvidaré 'noexiste'.
  Exio4 !noexiste :  VERSION
  kubot 'noexiste' cambió, lo recordaré.
  init m4v: te animas a probar el facto?
  init xDd
  m4v !noexiste
  -- CTCP solicitado por kubot: VERSION (bloqueado)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-bots/+bug/990915/+subscriptions


Follow ups

References