cyberpresidentvanellope/Bubberstation
1
0
Fork 0
mirror of https://github.com/Bubberstation/Bubberstation.git synced 2026-08-29 16:18:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

Unsanitized input for advanced injector name allows raw HTML injection (#49531)

Browse Source 
About The Pull Request

Unsanitized input allows for raw HTML injection on specifying advanced injector name inside a DNA console.
This commit is contained in:
Bobbahbrown
2020-02-24 08:56:30 +13:00
committed by GitHub
parent 9362805089
commit 0601db18d2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/game/machinery/computer/dna_console.dm
+1 -1
View File
@@ -923,7 +923,7 @@
if("add_advinjector")
if(LAZYLEN(injector_selection) < max_injector_selections)
var/new_selection = input(usr, "Enter Adv. Injector name", "Advanced Injectors") as text|null
var/new_selection = stripped_input(usr, "Enter Adv. Injector name", "Advanced Injectors")
if(new_selection && !(new_selection in injector_selection))
injector_selection[new_selection] = list()