Potential player name exploit.
Guest last edited by
I was playing on a duel server when I saw a player apparently attempting to inject HTML into their name. Their join/leave messages appeared to have HTML in them, like so:
The user spoke once then disconnected, but upon speaking their name lacked the html, and was simply the word “test”
I have no way of knowing, but the game might be doing something strange with player names in such a way that may or may not be exploitable (script tags, perhaps?).
I managed to catch the player trying to talk and then disconnecting, showing the discrepancy in their names.
I’ve attached a screenshot regarding the issue.
This might be nothing, but I thought that I might as well bring it to your attention. Thanks for keeping Chivalry awesome =).