From 2cd1bb7cb80d94857a61da65566ecd2472b082ae Mon Sep 17 00:00:00 2001 From: Akrilla Date: Mon, 6 Apr 2020 10:33:54 +0100 Subject: [PATCH] XSS fix (#50429) --- code/game/machinery/computer/security.dm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/game/machinery/computer/security.dm b/code/game/machinery/computer/security.dm index 42a62cda359..864172b0fed 100644 --- a/code/game/machinery/computer/security.dm +++ b/code/game/machinery/computer/security.dm @@ -748,7 +748,7 @@ What a mess.*/ switch(href_list["choice"]) if("Change Rank") if(active1) - active1.fields["rank"] = href_list["rank"] + active1.fields["rank"] = strip_html(href_list["rank"]) if(href_list["rank"] in get_all_jobs()) active1.fields["real_rank"] = href_list["real_rank"]