cyberpresidentvanellope/Bubberstation
1
0
Fork 0
mirror of https://github.com/Bubberstation/Bubberstation.git synced 2026-07-12 08:36:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

[s] Fixes HTML injections via pet tricks (#87595)

Browse Source 
## About The Pull Request

Closes #87592
You could pass additional args into emotes with zero sanitization if you
got yourself a way to call TGUI acts

## Changelog
🆑
fix: Fixed HTML injections via pet tricks
/🆑
This commit is contained in:
SmArtKar
2024-10-31 14:30:33 +01:00
committed by GitHub
parent e0be65b21f
commit c243b2637f
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/modules/modular_computers/file_system/programs/virtual_pet.dm
+3
View File
@@ -559,6 +559,9 @@ GLOBAL_LIST_EMPTY(virtual_pets_list)
return TRUE
if(!isnull(trick_name))
pet.ai_controller.set_blackboard_key(BB_TRICK_NAME, trick_name)
for (var/trick_move in trick_sequence)
if (!length(GLOB.emote_list[LOWER_TEXT(trick_move)]))
trick_sequence -= trick_move
pet.ai_controller.override_blackboard_key(BB_TRICK_SEQUENCE, trick_sequence)
playsound(computer.loc, 'sound/mobs/non-humanoids/orbie/orbie_trick_learned.ogg', 50)