You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Taint-unsafe string method calls on event payloads
CHAT_MSG_SYSTEM roll parsing crashed during combat: RollFrame/Events.lua called text:match() on tainted event payload, triggering "secret string value tainted by 'Loothing'" errors. Fixed with tostring() detaint + string.match() global call
CHAT_MSG_WHISPER handler crashed during combat: WhisperHandler.lua called string methods on tainted message and sender. Both detainted with tostring() at handler entry point
Defensive string.sub() in Announcer: Changed text:sub(1, 40) to string.sub(text, 1, 40) for taint-safe consistency