Writing my own server that is meant to be used by Nightbot’s urlfetch I’ve found out that Nightbot does not encode $(query) parameter in urlfetch. This can lead to unwanted results or even may be dangerous as $(query) can contain any string. Any parameter expanded inside $(urlfetch) must be URIcomponent-encoded (so e.g. ampersand symbols & turn into %26)
@FreeSlave Hmm… Why using “
$(query)” in “
$(urlfetch)”? Use “
$(querystring)” or “
$(querystring $(query))”. Well, you have point.
Oh, right. I overlooked this parameter. Seems like querystring is the right thing to use. Thanks for pointing this out.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.