Skip to content

Players with < or > in their name can screw up log uploading #39

@sapphonie

Description

@sapphonie
char msg[128];
V_snprintf(msg, sizeof(msg),
   "\"%s<%d><%s><%s>\" triggered \"chargeready\"\n",
   pInfo->GetName(), pInfo->GetUserID(),
   pInfo->GetNetworkIDString(), szTeam);
engine->LogPrint(msg);

pInfo->GetName() does not do any sanitization 😬

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions