search

KazWolfe / HuskyBot

Discord chatbot for /r/DIY_Tech. Roo!
Mozilla Public License 2.0
6 stars 6 forks source link

HuskyUtils.escape_markdown doesn't escape mention strings #7

Closed Catbuttes closed 4 years ago

Catbuttes commented 4 years ago

If I change my username to the format <@{user_id_here}> I can get huskey to mention people

Catbuttes commented 4 years ago

image

KazWolfe commented 4 years ago

Fixed with most recent commit - a few places may still use unprotected methods, but most should be okay. I can't think of anything that will generate an errant mention, though.