Merge pull request #11515 from Tayyyyyyy/sanitize

Sanitize all inputs
This commit is contained in:
variableundefined
2019-08-11 22:09:10 +08:00
committed by GitHub
37 changed files with 90 additions and 79 deletions
@@ -249,7 +249,7 @@
var/amount_per_pill = reagents.total_volume / count
if(amount_per_pill > 100)
amount_per_pill = 100
var/name = input(usr,"Name:","Name your pill!","[reagents.get_master_reagent_name()] ([amount_per_pill]u)") as text|null
var/name = clean_input("Name:","Name your pill!","[reagents.get_master_reagent_name()] ([amount_per_pill]u)")
if(!name)
return
name = reject_bad_text(name)
@@ -270,7 +270,7 @@
P.forceMove(loaded_pill_bottle)
updateUsrDialog()
else
var/name = input(usr, "Name:", "Name your bag!", reagents.get_master_reagent_name()) as text|null
var/name = clean_input("Name:", "Name your bag!", reagents.get_master_reagent_name())
if(!name)
return
name = reject_bad_text(name)
@@ -295,7 +295,7 @@
var/amount_per_patch = reagents.total_volume/count
if(amount_per_patch > 40)
amount_per_patch = 40
var/name = input(usr, "Name:", "Name your patch!", "[reagents.get_master_reagent_name()] ([amount_per_patch]u)") as text|null
var/name = clean_input("Name:", "Name your patch!", "[reagents.get_master_reagent_name()] ([amount_per_patch]u)")
if(!name)
return
name = reject_bad_text(name)
@@ -317,7 +317,7 @@
else if(href_list["createbottle"])
if(!condi)
var/name = input(usr, "Name:", "Name your bottle!", reagents.get_master_reagent_name()) as text|null
var/name = clean_input("Name:", "Name your bottle!", reagents.get_master_reagent_name())
if(!name)
return
name = reject_bad_text(name)