NightDev Community Forums

Nightbot does not encode parameters in urlfetch?

Writing my own server that is meant to be used by Nightbot’s urlfetch I’ve found out that Nightbot does not encode $(query) parameter in urlfetch. This can lead to unwanted results or even may be dangerous as $(query) can contain any string. Any parameter expanded inside $(urlfetch) must be URIcomponent-encoded (so e.g. ampersand symbols & turn into %26)

@FreeSlave Hmm… Why using “$(query)” in “$(urlfetch)”? Use “$(querystring)” or “$(querystring $(query))”. Well, you have point.

1 Like

Oh, right. I overlooked this parameter. Seems like querystring is the right thing to use. Thanks for pointing this out.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.