Merge pull request #9506 from AffectedArc07/patch-1

[s] Stops you being able to gib the whole server with NTSL
This commit is contained in:
Crazy Lemon
2018-09-09 03:36:16 -07:00
committed by GitHub
@@ -248,7 +248,7 @@
But I like HTML, so back to no sanitizing.*/
var/message = interpreter.GetVar("$content")
var/regex/bannedTags = new ("(<script|<iframe|<video|<audio|<embed)")
var/regex/bannedTags = new ("(<script|<iframe|<video|<audio|<embed|<svg)")
if(bannedTags.Find(message)) //uh oh
message_admins("Warning: Current Telecomms script contains banned html. Stripping message.")
log_admin("Warning: Current Telecomms script contains banned html. Stripping message.")