Mercurial > hg > egg-tcls
changeset 54:301df7d15861
quotedb: Using [join utext " "] on command input string is harmful. Fixed.
author | Matti Hamalainen <ccr@tnsp.org> |
---|---|
date | Thu, 08 Sep 2011 17:48:37 +0300 |
parents | 51e6b16a7601 |
children | f7ccab2a5811 |
files | quotedb.tcl |
diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/quotedb.tcl Thu Sep 08 17:47:24 2011 +0300 +++ b/quotedb.tcl Thu Sep 08 17:48:37 2011 +0300 @@ -354,7 +354,7 @@ #------------------------------------------------------------------------- proc qdb_command {utable unick uhost uhand uchan utext upublic} { - set utext [string trim [join $utext " "]] + set utext [string trim $utext] if {$utext == "" || $utext == {}} { # No arguments, assume random query