Atom command doesn't sanitize input
Opened this issue · 2 comments
montagsoup commented
The atom command in cogs/server.py doesn't do anything to make sure that 'element' doesn't have slashes or dots in it, so someone could potentially get it to request other pages on the Chemical Elements site. Not a big deal, but a simple regex could probably fix it.
sjasct commented
It just throws a 404 at the moment but I'll get round to showing specific 'invalid char' error msg when I can.
sjasct commented
So, that specific issue was fixed but now it just 404s every time a correct element is sent.