{"comment":{"url":"https://api.github.com/repos/wardellchandler/HangoutsBot/comments/10571636","html_url":"https://github.com/wardellchandler/HangoutsBot/commit/cdcbadc0bf6e3bf1d8107e62544bd4649d0db7c4#commitcomment-10571636","id":10571636,"user":{"login":"ShaunOfTheLive","id":394871,"avatar_url":"https://avatars.githubusercontent.com/u/394871?v=3","gravatar_id":"","url":"https://api.github.com/users/ShaunOfTheLive","html_url":"https://github.com/ShaunOfTheLive","followers_url":"https://api.github.com/users/ShaunOfTheLive/followers","following_url":"https://api.github.com/users/ShaunOfTheLive/following{/other_user}","gists_url":"https://api.github.com/users/ShaunOfTheLive/gists{/gist_id}","starred_url":"https://api.github.com/users/ShaunOfTheLive/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ShaunOfTheLive/subscriptions","organizations_url":"https://api.github.com/users/ShaunOfTheLive/orgs","repos_url":"https://api.github.com/users/ShaunOfTheLive/repos","events_url":"https://api.github.com/users/ShaunOfTheLive/events{/privacy}","received_events_url":"https://api.github.com/users/ShaunOfTheLive/received_events","type":"User","site_admin":false},"position":null,"line":null,"path":"","commit_id":"cdcbadc0bf6e3bf1d8107e62544bd4649d0db7c4","created_at":"2015-04-04T05:01:20Z","updated_at":"2015-04-04T05:01:20Z","body":"I like this idea, but there's a huge flaw in the implementation:\r\n\"If a command is blocked, its subcommands aren't blocked.\"\r\nThis means that a user can just send any argument after a command that's not expecting arguments, and this will bypass admin, for example \"/quit test\" will let anybody quit.\r\nI suppose the command should check whether it's expecting any arguments, and if not, then it should refuse to run if any arguments are given. But there's still kind of a conceptual problem with subcommands vs. arguments."}}