• src/sbbs3/logon.cpp logout.cpp postmsg.cpp putmsg.cpp readmail.cpp rea

    From Rob Swindell (on Windows@VERT to Git commit to main/sbbs/master on Sunday, January 14, 2024 19:35:00
    https://gitlab.synchro.net/main/sbbs/-/commit/9b1a34b3fa24979e61935f40
    Modified Files:
    src/sbbs3/logon.cpp logout.cpp postmsg.cpp putmsg.cpp readmail.cpp readmsgs.cpp sbbs.h str.cpp text.h textgen.c
    Log Message:
    Don't expand @-codes automatically for all node messages/telegrams saved

    This recent enhancement (Commit b27bd426) introduced security and usability concerns.

    So I created (and am now using where requested) a wrapper for formatting text.dat/ini strings which will automaticlaly detect @-code encoded strings
    and expand/use them *only* (instead of printf %-specifiers).

    This might impact issue #696 since although unintentionally, it actually was possible to mix @-codes and %-specifier usage in certain (node status) text.dat/ini strings, but that should not be possible now. It's either/or: @-codes or %-specifiers, not both.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net