Reply to thread

Message

<blockquote data-quote="NO4H" data-source="post: 421905" data-attributes="member: 73063">Hi devbest,I recently came across an &quot;exploit&quot; that allows users to bypass the bad HTML filter on bot speech setup.Normally for example &lt;font size=&quot;200&quot;&gt; and &lt;/font&gt; would be blocked, but by simply using &lt;FONT SIZE=&quot;200&quot;&gt; and &lt;/FONT&gt; in capitals, you can bypass the filter. I also believe you can work around it with other variations too like &quot;FoNT&quot; or &quot;fOnT&quot; - but I do not remember. 200 is not the font size limit, you can make it go much higher and take up the whole screen. I have not tested this with alot of other HTML, but I'm sure this could be used to do much more malicious things.It is shown here[SPOILER=&quot;Image&quot;]<img src="https://image.prntscr.com/image/ZJLYy7V7QX_h5oRX5iIuhg.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /> [/SPOILER]Here's the fix which completely removes any form of string upon saving bot speeches.Go to SaveBotActionEvent.cs and find:[CODE]for (int i = 0; i &lt;= SpeechData.Length - 1; i++)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; using (IQueryAdapter dbClient = DatabaseManager.GetQueryReactor())[/CODE]Replace that with:[CODE]for (int i = 0; i &lt;= SpeechData.Length - 1; i++)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; SpeechData[i] = Regex.Replace(SpeechData[i], &quot;&lt;(.|\\n)*?&gt;&quot;, string.Empty);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; using (IQueryAdapter dbClient = DatabaseManager.GetQueryReactor())[/CODE]Happy days.</blockquote>

[QUOTE="NO4H, post: 421905, member: 73063"] Hi devbest, I recently came across an "exploit" that allows users to bypass the bad HTML filter on bot speech setup. Normally for example and would be blocked, but by simply using and in capitals, you can bypass the filter. I also believe you can work around it with other variations too like "FoNT" or "fOnT" - but I do not remember. 200 is not the font size limit, you can make it go much higher and take up the whole screen. I have not tested this with alot of other HTML, but I'm sure this could be used to do much more malicious things. It is shown here [SPOILER="Image"][IMG]https://image.prntscr.com/image/ZJLYy7V7QX_h5oRX5iIuhg.png[/IMG] [/SPOILER] Here's the fix which completely removes any form of string upon saving bot speeches. Go to SaveBotActionEvent.cs and find: [CODE]for (int i = 0; i <= SpeechData.Length - 1; i++) { using (IQueryAdapter dbClient = DatabaseManager.GetQueryReactor())[/CODE] Replace that with: [CODE]for (int i = 0; i <= SpeechData.Length - 1; i++) { SpeechData[i] = Regex.Replace(SpeechData[i], "<(.|\\n)*?>", string.Empty); using (IQueryAdapter dbClient = DatabaseManager.GetQueryReactor())[/CODE] [B]Happy days.[/B] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members