I reported this (well, two independent ways of accomplishing this) to Valve about a month ago. Apparently, it's still unpatched.
Disabling sprays on your client will prevent you from crashing, and disabling sprays on the server will prevent attackers from crashing your server's players.
_______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds
