Subj : DDMsgReader: When replying to a message, @-codes are now expanded in t
To   : GitLab note in main/sbbs
From : Rob Swindell
Date : Fri Dec 02 2022 10:46:45

https://gitlab.synchro.net/main/sbbs/-/merge_requests/226#note_2916

@-codes in messages posted by non-Sysops are normally *never* expanded on Synchronet due to security issues (e.g. a non-sysop posts @HANGUP@, or @DELAY:99999@ for example). Similarly, any message received over a message network should never have any @-codes expanded.This commit seems to introduce a security concern and raises general concerns about how SlyEdit handles @-codes currently.
--- SBBSecho 3.20-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.