diff options
| author |  Fabio Bas | 2010-07-26 20:06:51 +0000 |
|---|---|---|
| committer | Fabio Bas | 2010-07-26 20:06:51 +0000 |
| commit | 01b44a08c9f66e410dce0d92b27ffd764d949c65 (patch) | |
| tree | ef65ff9c97c0331f13c28ed64c49986714bb7c5a /src/modules | |
| parent | applied patch for #857 (diff) | |
| download | KVIrc-01b44a08c9f66e410dce0d92b27ffd764d949c65.tar.gz KVIrc-01b44a08c9f66e410dce0d92b27ffd764d949c65.tar.bz2 KVIrc-01b44a08c9f66e410dce0d92b27ffd764d949c65.zip | |
patch for #858
git-svn-id: https://svn.kvirc.de/svn/trunk/kvirc@4693 17fca916-40b9-46aa-a4ea-0a15b648b75c
Diffstat (limited to 'src/modules')
| -rw-r--r-- | src/modules/dcc/requests.cpp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/modules/dcc/requests.cpp b/src/modules/dcc/requests.cpp index f758d36ec..e4aad108d 100644 --- a/src/modules/dcc/requests.cpp +++ b/src/modules/dcc/requests.cpp @@ -86,7 +86,8 @@ static void dcc_module_request_error(KviDccRequest * dcc,const QString& errText) if(KVI_OPTION_BOOL(KviOption_boolNotifyFailedDccHandshakes)) { QString szError = QString("Sorry, your DCC %1 request can't be satisfied: %2").arg(dcc->szType.ptr(), errText); - dcc_module_reply_errmsg(dcc,szError); + //since szError contains an user-suppplied string, we simplify it to avoid any kind of injection (bug #858) + dcc_module_reply_errmsg(dcc,szError.simplified()); } } |