-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Description
Joueur.cpp/joueur/src/base_game.cpp
Line 68 in f4f40d6
| to_send += ai_->get_name(); |
Currently player names are appended to the json "raw", no characters are escaped.
So if you have a " in your name, that will terminate the JSON structure being built, and the game server might reject you for invalid JSON. Or maybe even be open to attacks (however the game server does try to guard against malicious clients so hopefully not).
We need to escape any strings the AIs can generate for safety.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels