[MIRROR] [s] Fix XSS in Skull Echo (#365)

* Fix XSS in skull echo (#52993)

About The Pull Request

Closes #52992
Changelog

cl
fix: Skull Echo now correctly encodes its speech.
/cl

* [s] Fix XSS in Skull Echo

Co-authored-by: Jared-Fogle <35135081+Jared-Fogle@users.noreply.github.com>
This commit is contained in:
SkyratBot
2020-08-17 14:49:08 +02:00
committed by GitHub
co-authored by Jared-Fogle
parent a50286bf93
commit 47192ec2f5
@@ -174,7 +174,7 @@
sent_message = message_setting.get_value()
if(host_mob.stat == DEAD)
return
to_chat(host_mob, "<i>You hear a strange, robotic voice in your head...</i> \"<span class='robot'>[sent_message]</span>\"")
to_chat(host_mob, "<i>You hear a strange, robotic voice in your head...</i> \"<span class='robot'>[html_encode(sent_message)]</span>\"")
/datum/nanite_program/comm/hallucination
name = "Hallucination"