Files
Bubberstation/code/modules/research
SkyratBot 3ef712a8d4 [MIRROR] [s] sanitizes nanite extra settings (#426)
* [s] sanitizes nanite extra settings (#53065)

/datum/nanite_extra_setting/text/get_value()
return html_encode(value)

HTML injection bad. Brainwashing and potentially happiness programs are all subject to this, unless code has changed for how objective text is rendered. I don't think there's any case where nanites even need to be able to accept raw html.

* [s] sanitizes nanite extra settings

Co-authored-by: silicons <2003111+silicons@users.noreply.github.com>
2020-08-19 20:13:16 -04:00
..