/ 
POE-Component-IRC-2.4
River stage three • 56 direct dependents • 126 total dependents
/ POE::Filter::IRC
Security Advisories (1)
CVE-2010-3438 (2019-11-12)

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as \"some text\\rQUIT\" to the 'privmsg' handler, which would cause the client to disconnect from the server.

NAME

POE::Filter::IRC -- A POE-based parser for the IRC protocol.

SYNOPSIS

my $filter = POE::Filter::IRC->new();
my @events = @{$filter->get( [ @lines ] )};

DESCRIPTION

POE::Filter::IRC takes lines of raw IRC input and turns them into weird little data structures, suitable for feeding to POE::Component::IRC. They look like this:

{ name => 'event name', args => [ some info about the event ] }

METHODS

  • new

    Creates a new POE::Filter::IRC object. Duh. :-) Takes no arguments.

  • get

    Takes an array reference full of lines of raw IRC text. Returns an array reference of processed, pasteurized events.

  • put

    There is no "put" method. That would be kinda silly for this filter, don't you think?

AUTHOR

Dennis "fimmtiu" Taylor, <dennis@funkplanet.com>.

SEE ALSO

The documentation for POE and POE::Component::IRC.