Security Advisories (1)
CVE-2010-3438 (2019-11-12)

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as \"some text\\rQUIT\" to the 'privmsg' handler, which would cause the client to disconnect from the server.

NAME

POE::Filter::IRC -- A POE-based parser for the IRC protocol

SYNOPSIS

my $filter = POE::Filter::IRC->new();
my @events = @{ $filter->get( [ @lines ] ) };

DESCRIPTION

POE::Filter::IRC takes lines of raw IRC input and turns them into weird little data structures, suitable for feeding to POE::Component::IRC. They look like this:

{ name => 'event name', args => [ some info about the event ] }

This module was long deprecated in POE::Component::IRC. It now uses the same mechanism that that uses to parse IRC text.

CONSTRUCTOR

new

Returns a new POE::Filter::Stackable object containing a POE::Filter::IRCD object and a POE::Filter::IRC::Compat object. This does the same job that POE::Filter::IRC used to do.

METHODS

See the documentation for POE::Filter::IRCD and POE::Filter::IRC::Compat.

AUTHOR

Dennis fimmtiu Taylor

Refactoring by Chris BinGOs Williams <chris@bingosnet.co.uk>

SEE ALSO

The documentation for POE and POE::Component::IRC.

POE::Filter::Stackable

POE::Filter::IRCD

POE::Filter::IRC::Compat