matthew/enhanced-discord.py
1
0
Fork 0
Code Issues 4 Pull Requests 21 Projects Releases Wiki Activity

[commands] Ensure no mentions escape clean_content

Browse Source 
Some clever nicknames or role names would lead themselves to
resolving to pings.
This commit is contained in:
Rapptz 2017-08-10 03:15:19 -04:00
parent cb709cc9da
commit eb673ec2af
1 changed files with 2 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
discord/ext/commands/converter.py
View File

@ -436,13 +436,5 @@ class clean_content(Converter):
pattern = re.compile('|'.join(transformations.keys())) pattern = re.compile('|'.join(transformations.keys()))
result = pattern.sub(replace, result) result = pattern.sub(replace, result)
transformations = { # Completely ensure no mentions escape:
'@everyone': '@\u200beveryone', return re.sub(r'@(everyone|here|[!&]?[0-9]{17,21})', '@\u200b\\1', result)
'@here': '@\u200bhere'
}
def repl2(obj):
return transformations.get(obj.group(0), '')
pattern = re.compile('|'.join(transformations.keys()))
return pattern.sub(repl2, result)