[s] Audits object say() uses to make handling text more safe (#61147)

Made all say()s deal with encoding, audited all uses of say() to prevent double encoding or like, manually inserting span(). 
I left some stuff without sanitize that only draws from the code, since it's hell to clean up otherwise. That
and I let admins do whatever the fuck they want
This commit is contained in:
LemonInTheDark
2021-09-02 08:36:36 +01:00
committed by GitHub
parent 8e9c6b5609
commit 1f5e76a39f
15 changed files with 31 additions and 21 deletions
@@ -34,7 +34,7 @@
var/atom/movable/shell = parent.shell
// Prevents appear as the individual component if there is a shell.
if(shell)
shell.say(html_encode(message.value))
shell.say(message.value)
else
say(message.value)
TIMER_COOLDOWN_START(parent, COOLDOWN_CIRCUIT_SPEECH, speech_cooldown)