Sanitization

This commit is contained in:
Casey
2022-10-02 17:58:34 +00:00
committed by CHOMPStation2
parent dbc2cba71c
commit d8b03336e5
27 changed files with 115 additions and 50 deletions
+5 -1
View File
@@ -86,10 +86,14 @@
if (!holder)
return
var/msg = sanitize(tgui_input_text(usr, "Message:", text("Subtle PM to [M.key]")))
var/msg = tgui_input_text(usr, "Message:", text("Subtle PM to [M.key]"))
if (!msg)
return
if(!(msg[1] == "<" && msg[length(msg)] == ">")) //You can use HTML but only if the whole thing is HTML. Tries to prevent admin 'accidents'.
msg = sanitize(msg)
if(usr)
if (usr.client)
if(usr.client.holder)