mirror of
https://github.com/Bubberstation/Bubberstation.git
synced 2026-07-12 08:36:00 +01:00
[MIRROR] [s] Fixes exploit to bypass authentication on requests consoles (#1365)
* [s] Fixes exploit to bypass authentication on requests consoles (#54445) * [s] Fixes exploit to bypass authentication on requests consoles Credit @ alexkar598 https://github.com/yogstation13/Yogstation/pull/10030 * Fix proc call name * [s] Fixes exploit to bypass authentication on requests consoles Co-authored-by: Jordan Brown <Cyberboss@users.noreply.github.com>
This commit is contained in:
@@ -259,6 +259,8 @@ GLOBAL_LIST_EMPTY(req_console_ckey_departments)
|
||||
if(href_list["sendAnnouncement"])
|
||||
if(!announcementConsole)
|
||||
return
|
||||
if(!(announceAuth || isAdminGhostAI(usr)))
|
||||
return
|
||||
if(isliving(usr))
|
||||
var/mob/living/L = usr
|
||||
message = L.treat_message(message)
|
||||
|
||||
Reference in New Issue
Block a user