Skip to content

v1.1.7

Latest

Choose a tag to compare

@frostdev-ops frostdev-ops released this 09 Mar 00:43
· 134 commits to master since this release

Fixed

Taint-unsafe string method calls on event payloads

  • CHAT_MSG_SYSTEM roll parsing crashed during combat: RollFrame/Events.lua called text:match() on tainted event payload, triggering "secret string value tainted by 'Loothing'" errors. Fixed with tostring() detaint + string.match() global call
  • CHAT_MSG_WHISPER handler crashed during combat: WhisperHandler.lua called string methods on tainted message and sender. Both detainted with tostring() at handler entry point
  • Defensive string.sub() in Announcer: Changed text:sub(1, 40) to string.sub(text, 1, 40) for taint-safe consistency