cyberpresidentvanellope/Bubberstation
1
0
Fork 0
mirror of https://github.com/Bubberstation/Bubberstation.git synced 2026-08-28 15:47:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Replaces a bunch of input() with stripped_input()

Browse Source 
Some of these were exploitable for XSS, as well.
This commit is contained in:
tkdrg
2015-01-11 19:02:53 -03:00
parent 713da9344b
commit b852aa41ea
20 changed files with 29 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/controllers/subsystem/voting.dm
+2 -2
View File
@@ -149,10 +149,10 @@ var/datum/subsystem/vote/SSvote
if("restart") choices.Add("Restart Round","Continue Playing")
if("gamemode") choices.Add(config.votable_modes)
if("custom")
question = html_encode(input(usr,"What is the vote for?") as text|null)
question = stripped_input(usr,"What is the vote for?")
if(!question) return 0
for(var/i=1,i<=10,i++)
var/option = capitalize(html_encode(input(usr,"Please enter an option or hit cancel to finish") as text|null))
var/option = capitalize(stripped_input(usr,"Please enter an option or hit cancel to finish"))
if(!option || mode || !usr.client) break
choices.Add(option)
else return 0