search

jagrosh / Vortex

🌀 Discord Moderation Bot
https://github.com/jagrosh/Vortex/wiki
Apache License 2.0
569 stars 321 forks source link

[Discord Breaking Change] #47

Closed Sanduhr32 closed 4 years ago

Sanduhr32 commented 4 years ago

Discord changed their sanitation character list which allows vortex to mention everyone in some specific conditions. This is an exploit.

@jagrosh it was just performed in your bots server and Discord Giveaways. We can't do nothing about it.

xiJulian commented 4 years ago

Yeah, Please fix this!

BurakDev commented 4 years ago

Exploit come from a missing everyone cyrilic filtering on Lookup command.

Serverinfo don't have this issue because of filterEveryone method call. https://github.com/jagrosh/Vortex/blob/master/src/main/java/com/jagrosh/vortex/commands/general/ServerinfoCmd.java#L54

And here is the lookup command. https://github.com/jagrosh/Vortex/blob/master/src/main/java/com/jagrosh/vortex/commands/tools/LookupCmd.java#L108

Sanduhr32 commented 4 years ago

PR/Issue is or will be closed due being fixed.