edwardslabs / CloudBot

CloudBot - The simple, fast, expandable, open-source Python IRC Bot!
GNU General Public License v3.0
28 stars 31 forks source link

Fix exploit in jokes.py #177

Closed linuxdaemon closed 6 years ago

linuxdaemon commented 6 years ago

Certain commands (like .yomamma and .kero) would allow the user to specify arbitrary input, and prepend that to the line without anything before it. This is a Bad Idea™ as it allows a user to run other bot's commands (like BotServ fantasy commands and the like).