Subj : src/sbbs3/logon.cpp logout.cpp postmsg.cpp putmsg.cpp readmail.cpp rea To : Git commit to main/sbbs/master From : Rob Swindell (on Windows 11) Date : Sun Jan 14 2024 07:35 pm https://gitlab.synchro.net/main/sbbs/-/commit/9b1a34b3fa24979e61935f40 Modified Files: src/sbbs3/logon.cpp logout.cpp postmsg.cpp putmsg.cpp readmail.cpp readmsgs.cpp sbbs.h str.cpp text.h textgen.c Log Message: Don't expand @-codes automatically for all node messages/telegrams saved This recent enhancement (Commit b27bd426) introduced security and usability concerns. So I created (and am now using where requested) a wrapper for formatting text.dat/ini strings which will automaticlaly detect @-code encoded strings and expand/use them *only* (instead of printf %-specifiers). This might impact issue #696 since although unintentionally, it actually was possible to mix @-codes and %-specifier usage in certain (node status) text.dat/ini strings, but that should not be possible now. It's either/or: @-codes or %-specifiers, not both. .