Writing my own server that is meant to be used by Nightbot’s urlfetch I’ve found out that Nightbot does not encode $(query) parameter in urlfetch. This can lead to unwanted results or even may be dangerous as $(query) can contain any string. Any parameter expanded inside $(urlfetch) must be URIcomponent-encoded (so e.g. ampersand symbols & turn into %26)
@FreeSlave Hmm… Why using “$(query)” in “$(urlfetch)”? Use “$(querystring)” or “$(querystring $(query))”. Well, you have point.
1 Like
Oh, right. I overlooked this parameter. Seems like querystring is the right thing to use. Thanks for pointing this out.
1 Like
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.