Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The magical disappearing backslash! Coming to a definition near you. #872

Closed
AnthonyAMC opened this issue Oct 29, 2014 · 5 comments
Closed

Comments

@AnthonyAMC
Copy link
Contributor

/ex if true { - define a 'this\that' } - narrate %a%

And the debug of it happening in a script.

@mcmonkey4eva
Copy link
Member

Congratulations, you escaped the letter t and the number 5.

This is an old 'escape' system auf came up with so you could do \<not-a-tag\> instead of <&lt>not-a-tag<&gt>... nobody uses it, it's undocumented, it's outside the range of standard Denizenness... I think I'ma just delete it.

@AnthonyAMC
Copy link
Contributor Author

The magical disappearing backslash Part 2!

  • Now in 3D *

Can cause an exception by escaping the closing quote.
Would this make it possible to inject arbitrary java code?

  • NOTE: To make that * Now in 3D * line i had to escape the * with a \ hazah!

@AnthonyAMC
Copy link
Contributor Author

And for the encore...

You can work around this by escaping the backslash
\\ or <&bs><&bs>
ymmv

@mcmonkey4eva
Copy link
Member

Would this make it possible to inject arbitrary java code?
No.

@mcmonkey4eva
Copy link
Member

I've committed a fix for this to the dev branch... I make no claims that it removes \escaping, just that it removes such escaping done by Denizen. Anything done by YAML is another story.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants