diff --git a/README.md b/README.md index ded812f..b8648e7 100644 --- a/README.md +++ b/README.md @@ -147,7 +147,7 @@ from your Bot, e.g. everything in `example/` and disable/remove all not needed b It's important to escape or remove `$` in input from user, files or network (_as bashbot does_) One of the powerful features of unix shells are variable and command substitution using `${}` and`$()`, -this can lead to remove code execution (RCE) or information disclosing bugs if unescaped `$` is included in untrusted input, e.g. `$$` or `$(rm -rf /*)` +this can lead to remote code execution (RCE) or remote information disclosure (RID) bugs if unescaped `$` is included in untrusted input, e.g. `$$` or `$(rm -rf /*)` A powerful tool to improve your scripts is `shellcheck`. You can [use it online](https://www.shellcheck.net/) or [install shellcheck locally](https://github.com/koalaman/shellcheck#installing). Shellcheck is used extensively in bashbot development @@ -239,4 +239,4 @@ See `mycommnds.sh.dist` for an example. If you feel that there's something missing or if you found a bug, feel free to submit a pull request! -#### $$VERSION$$ v1.21-dev-33-gd083390 +#### $$VERSION$$ v1.21-dev-34-ga5307e3 diff --git a/doc/4_expert.md b/doc/4_expert.md index 3b2b4ea..4d137f3 100644 --- a/doc/4_expert.md +++ b/doc/4_expert.md @@ -169,7 +169,7 @@ echo $COMMANDS $MODULEDIR $BOTACL $TMPDIR $COUNTFILE /usr/local/telegram-bot-bash/botacl /usr/local/telegram-bot-bash/data-bot-bash /usr/local/telegram-bot-bash/count -` +``` After sourcing you can use bashbot functions to send Messages, Locations, Pictures etc. to any Telegram User or Chat you are in. See [Send Messages](2_usage.md#sending-messages). @@ -378,5 +378,5 @@ for every poll until the maximum of BASHBOT_SLEEP ms. #### [Prev Advanced Use](3_advanced.md) #### [Next Best Practice](5_practice.md) -#### $$VERSION$$ v1.21-dev-29-g13d15f4 +#### $$VERSION$$ v1.21-dev-34-ga5307e3