Alyx bb10d54844 Fixed easily exploitable 0day involving wide characters. Slightly surprised no one has triggered this yet, as exploitation involves nothing more than having Auto send a >8-byte character (, "𝄞"), via doing something like using LinkTitle.pm and putting the character into the <title> field.. This is a MAJOR security exploiit, and any user using a module where Auto would echo user-defined data should update immediately.

2011-04-13 19:58:25 -05:00

..

API

Fixed parsing of host masks with / in them. (I'm looking at you, freenode.)

2011-04-09 14:44:45 -06:00

Core

Fixing fails.

2011-04-11 23:03:24 -06:00

File/Copy

Include this with Auto, for the sake of simplicity.

2011-03-07 20:57:30 -07:00

Lib

Fixed easily exploitable 0day involving wide characters. Slightly surprised no one has triggered this yet, as exploitation involves nothing more than having Auto send a >8-byte character (, "𝄞"), via doing something like using LinkTitle.pm and putting the character into the <title> field.. This is a MAJOR security exploiit, and any user using a module where Auto would echo user-defined data should update immediately.

2011-04-13 19:58:25 -05:00

Parser

More tab removal.

2011-03-21 14:18:57 -06:00

Proto

Moved botinfo to State::IRC.

2011-03-20 13:40:41 -06:00

State

More tab removal.

2011-03-21 14:18:57 -06:00