v2nek / webchat2

Automatically exported from code.google.com/p/webchat2
GNU General Public License v2.0
0 stars 0 forks source link

MOTD string is escapable #17

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Connecting to a server that has a '\' as the last character of any line
in the MOTD

What is the expected output? What do you see instead?
MOTD should continue displaying, but instead will break right at this point

Please provide any additional information below.
I'm not sure whether this would allow someone to run some kind of remote
execution, but it seems that the string, once escaped, is still attempting
to be eval()uated, which I don't imagine is a very good thing.

Original issue reported on code.google.com by riley.m...@gmail.com on 24 May 2008 at 4:10