diff options
| author |  kosayoda <[email protected]> | 2020-09-18 23:33:56 +0800 |
|---|---|---|
| committer | kosayoda <[email protected]> | 2020-09-18 23:33:56 +0800 |
| commit | dc63f50d2445c628806e9ac4f08d5ece6c72b18a (patch) | |
| tree | 9a2b74b022d25026b56ae2a7e9bf4c96c6ecfbb0 /bot/bot.py | |
| parent | Merge pull request #421 from PureFunctor/caesar-command (diff) | |
Stop users from viewing messages they shouldn't.
Using a user token, a user could fetch the message ID of a message in
any channel, which may leak information when potential Message objects
are automatically converted and parsed.
Now, the bot will only retrive text from a valid Message object if the
user has read permissions for the message the channel is in.
Diffstat (limited to 'bot/bot.py')
0 files changed, 0 insertions, 0 deletions