Don't expand @-codes automatically for all node messages/telegrams saved
This recent enhancement (Commit b27bd426) introduced security and usability concerns. So I created (and am now using where requested) a wrapper for formatting text.dat/ini strings which will automaticlaly detect @-code encoded strings and expand/use them *only* (instead of printf %-specifiers). This might impact issue #696 since although unintentionally, it actually was possible to mix @-codes and %-specifier usage in certain (node status) text.dat/ini strings, but that should not be possible now. It's either/or: @-codes or %-specifiers, not both.
Showing
- src/sbbs3/logon.cpp 2 additions, 8 deletionssrc/sbbs3/logon.cpp
- src/sbbs3/logout.cpp 2 additions, 8 deletionssrc/sbbs3/logout.cpp
- src/sbbs3/postmsg.cpp 6 additions, 11 deletionssrc/sbbs3/postmsg.cpp
- src/sbbs3/putmsg.cpp 2 additions, 4 deletionssrc/sbbs3/putmsg.cpp
- src/sbbs3/readmail.cpp 5 additions, 10 deletionssrc/sbbs3/readmail.cpp
- src/sbbs3/readmsgs.cpp 2 additions, 7 deletionssrc/sbbs3/readmsgs.cpp
- src/sbbs3/sbbs.h 3 additions, 0 deletionssrc/sbbs3/sbbs.h
- src/sbbs3/str.cpp 24 additions, 0 deletionssrc/sbbs3/str.cpp
- src/sbbs3/text.h 1 addition, 1 deletionsrc/sbbs3/text.h
- src/sbbs3/textgen.c 1 addition, 1 deletionsrc/sbbs3/textgen.c
Loading
Please register or sign in to comment