relay: add extra forbidden commands in weechat protocol (issue #928)

Commands were already forbidden (option relay.weechat.commands):

- /exec
- /upgrade
- /quit

These extra commands are now forbidden by default:

- /fset
- /set
- /unset
- /plugin
- /script
- /python
- /perl
- /ruby
- /lua
- /tcl
- /guile
- /javascript
- /php
- /secure

1 files changed, 7 insertions, 5 deletions

diff --git a/src/plugins/relay/relay-config.c b/src/plugins/relay/relay-config.c
index dccb025c5..05d145cc5 100644
--- a/src/plugins/relay/relay-config.c
+++ b/src/plugins/relay/relay-config.c
@@ -1029,11 +1029,13 @@ relay_config_init ()
            "data (text or command) is received from a client; "
            "\"*\" means any command, a name beginning with \"!\" is "
            "a negative value to prevent a command from being executed, "
-           "wildcard \"*\" is allowed in names; by default all commands "
-           "are allowed except /exec, /upgrade and /quit (which could lead "
-           "to denial of service or remote code execution if the client is "
-           "not trusted)"),
-        NULL, 0, 0, "*,!exec,!upgrade,!quit", NULL, 0,
+           "wildcard \"*\" is allowed in names; by default some commands "
+           "are not allowed (they could lead to denial of service or remote "
+           "code execution if the client is not trusted)"),
+        NULL, 0, 0,
+        "*,!exec,!fset,!set,!unset,!plugin,!script,!python,!perl,!ruby,!lua,"
+        "!tcl,!guile,!javascript,!php,!secure,!upgrade,!quit",
+        NULL, 0,
         NULL, NULL, NULL,
         NULL, NULL, NULL,
         NULL, NULL, NULL);