[MIRROR] Fixes netpod href exploit (#27365)

* Fixes netpod href exploit (#82698)

## About The Pull Request
Can't have fits in detroit
## Why It's Good For The Game
Fixes #81616
## Changelog
🆑
fix: Netpods have had their security against exploits increased.
/🆑

---------

Co-authored-by: Kapu1178 <75460809+Kapu1178@ users.noreply.github.com>

* Fixes netpod href exploit

---------

Co-authored-by: Jeremiah <42397676+jlsnow301@users.noreply.github.com>
Co-authored-by: Kapu1178 <75460809+Kapu1178@ users.noreply.github.com>
This commit is contained in:
SkyratBot
2024-04-18 03:07:22 +02:00
committed by GitHub
parent f66efb2a83
commit 0a0aa64d8a
+10 -2
View File
@@ -443,8 +443,16 @@
/// Resolves a path to an outfit.
/obj/machinery/netpod/proc/resolve_outfit(text)
var/path = text2path(text)
if(ispath(path, /datum/outfit))
return path
if(!ispath(path, /datum/outfit))
return
for(var/wardrobe in cached_outfits)
for(var/outfit in wardrobe["outfits"])
if(path == outfit["path"])
return path
message_admins("[usr]:[usr.ckey] attempted to select an unavailable outfit from a netpod")
return
/// Severs the connection with the current avatar
/obj/machinery/netpod/proc/sever_connection()