UpdateMeBot
UpdateMeBot copied to clipboard
Special characters are not escaped, e.g. in submission titles
I experienced this with a title containing unbalanced ]s, but a quick glance at the code shows a lot more potential injection problems.
You should probably use a proper markdown model rather than concatenating the strings in the first place, but it's tricky since there are so many dialects floating around, including 2 on Reddit itself ...