cyberpresidentvanellope/Bubberstation
1
0
Fork 0
mirror of https://github.com/Bubberstation/Bubberstation.git synced 2026-08-25 22:19:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

[MIRROR] [s] sanitizes nanite extra settings (#426)

Browse Source 
* [s] sanitizes nanite extra settings (#53065)

/datum/nanite_extra_setting/text/get_value()
return html_encode(value)

HTML injection bad. Brainwashing and potentially happiness programs are all subject to this, unless code has changed for how objective text is rendered. I don't think there's any case where nanites even need to be able to accept raw html.

* [s] sanitizes nanite extra settings

Co-authored-by: silicons <2003111+silicons@users.noreply.github.com>
This commit is contained in:
SkyratBot
2020-08-19 20:13:16 -04:00
committed by GitHub
co-authored by silicons
parent d98e8f48b9
commit 3ef712a8d4
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/modules/research/nanites/extra_settings/text.dm
+3
View File
@@ -10,6 +10,9 @@
/datum/nanite_extra_setting/text/get_copy()
return new /datum/nanite_extra_setting/text(value)
/datum/nanite_extra_setting/text/get_value()
return html_encode(value)
/datum/nanite_extra_setting/text/get_frontend_list(name)
return list(list(
"name" = name,