Potential player name exploit.



  • Hi there,

    I was playing on a duel server when I saw a player apparently attempting to inject HTML into their name. Their join/leave messages appeared to have HTML in them, like so:

    test

    The user spoke once then disconnected, but upon speaking their name lacked the html, and was simply the word “test”

    I have no way of knowing, but the game might be doing something strange with player names in such a way that may or may not be exploitable (script tags, perhaps?).

    I managed to catch the player trying to talk and then disconnecting, showing the discrepancy in their names.

    I’ve attached a screenshot regarding the issue.

    This might be nothing, but I thought that I might as well bring it to your attention. Thanks for keeping Chivalry awesome =).