From dd1444dcd95d4753a1242ed6f58bf41947652fe1 Mon Sep 17 00:00:00 2001 From: James Lu Date: Mon, 7 Aug 2017 16:31:28 -0700 Subject: [PATCH] corecommands: block 'identify' from being used by command proxies such as networks.remote This would have pretty bad unintentional consequences... --- coremods/corecommands.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/coremods/corecommands.py b/coremods/corecommands.py index b2e1946..b73d390 100644 --- a/coremods/corecommands.py +++ b/coremods/corecommands.py @@ -16,6 +16,10 @@ from pylinkirc.log import log def _login(irc, source, username): """Internal function to process logins.""" + if irc.is_internal_client(source): + irc.error("Cannot use 'identify' via a command proxy.") + return + logindata = conf.conf['login'].get('accounts', {}).get(username, {}) network_filter = logindata.get('networks')