Skip to content

Top-Helper message length exploit #648

@Nxllpointer

Description

@Nxllpointer

Describe the bug
You can easily farm Top-Helper message points by adding thousands of Zero Width Joiners (invisible characters) to your help messages and boost yourself up the Top-Helper list.

Expected behavior
Unwanted characters should not increase the message points

To Reproduce

  1. Go to https://emojipedia.org/zero-width-joiner/ and copy the character
  2. Write a help message and add the character until you reach the message limit
  3. Take a look at the help_channel_messages database table
  4. => The message length is 2000

Screenshots
image
after a few messages

Fix

We can just adjust the value put into the database at TopHelpersMessageListener:

code

to not use just .length(), but ignore any fancy character. It is probably okay if we just count a-zA-Z0-9 or similar.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions