Fixes an exploit that allowed changing other people's flavour texts (#8221)

* Fixes a thing

* Changelog.

Co-authored-by: Matt Atlas <mattiathebest2000@hotmail.it>
This commit is contained in:
mikomyazaki
2020-02-08 21:46:29 +01:00
committed by GitHub
co-authored by Matt Atlas
parent 02e175870e
commit 7d4c3fa467
2 changed files with 44 additions and 0 deletions
@@ -839,6 +839,8 @@
src.examinate(M)
if (href_list["flavor_change"])
if(src != usr)
return
switch(href_list["flavor_change"])
if("done")
src << browse(null, "window=flavor_changes")
@@ -1072,6 +1074,7 @@
var/new_facial = input("Please select facial hair color.", "Character Generation",rgb(r_facial,g_facial,b_facial)) as color
if(new_facial)
r_facial = hex2num(copytext(new_facial, 2, 4))
g_facial = hex2num(copytext(new_facial, 4, 6))
b_facial = hex2num(copytext(new_facial, 6, 8))