You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Slash CommandsArea: what it touches
Bug FixesKind: in v2.1.233,
Bug FixesSection of the release
What
When a custom slash command's body is filled in with $1, $ARGUMENTS, $ARGUMENTS[n] or named arguments, the text you supply is now protected so it cannot itself be read as another placeholder and expanded a second time.
Details
Each substituted value is fenced with internal marker characters and its $ escaped; the markers are stripped once expansion finishes.
The template and every value are first scrubbed of those marker characters (U+FFFF and U+FFFE), which are replaced with the replacement character, so argument text cannot forge a fence.
Evidence
e.replaceAll(vLr, "\uFFFD")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
