langdev/log.langdev.org — pull request #9 by interruptz (2012-02-28 10:21:59+00:00)
Title: Security: Lf('\n') must be denied.

I found that 산낚지 is vulnerable to attack. 산낚지 can be controlled by anyone.
The following code reproduces the vulnerability of 산낚지.

socket.emit('msg', {
'nick': 'whatever',
'msg': '\r\nPRIVMSG #langdev :Hello? I am hacker!'
});

Thank you.