- | Left Hand: | [(l_hand && !(l_hand.flags&ABSTRACT)) ? l_hand : "Empty"] |
- | Right Hand: | [(r_hand && !(r_hand.flags&ABSTRACT)) ? r_hand : "Empty"] |
+ | Left Hand: | [(l_hand && !(l_hand.flags&ABSTRACT)) ? html_encode(l_hand) : "Empty"] |
+ | Right Hand: | [(r_hand && !(r_hand.flags&ABSTRACT)) ? html_encode(r_hand) : "Empty"] |
| |
"}
- dat += "| Back: | [(back && !(back.flags&ABSTRACT)) ? back : "Empty"]"
+ dat += " |
| Back: | [(back && !(back.flags&ABSTRACT)) ? html_encode(back) : "Empty"]"
if(has_breathable_mask && istype(back, /obj/item/tank))
dat += " [internal ? "Disable Internals" : "Set Internals"]"
dat += " |
| |
"
- dat += "| Head: | [(head && !(head.flags&ABSTRACT)) ? head : "Empty"] |
"
+ dat += "| Head: | [(head && !(head.flags&ABSTRACT)) ? html_encode(head) : "Empty"] |
"
var/obj/item/organ/internal/headpocket/C = get_int_organ(/obj/item/organ/internal/headpocket)
if(C)
@@ -309,7 +309,7 @@
if(slot_wear_mask in obscured)
dat += "| Mask: | Obscured |
"
else
- dat += "| Mask: | [(wear_mask && !(wear_mask.flags&ABSTRACT)) ? wear_mask : "Empty"]"
+ dat += " |
| Mask: | [(wear_mask && !(wear_mask.flags&ABSTRACT)) ? html_encode(wear_mask) : "Empty"]"
if(istype(wear_mask, /obj/item/clothing/mask/muzzle))
var/obj/item/clothing/mask/muzzle/M = wear_mask
@@ -322,23 +322,23 @@
if(slot_glasses in obscured)
dat += " |
| Eyes: | Obscured |
"
else
- dat += "| Eyes: | [(glasses && !(glasses.flags&ABSTRACT)) ? glasses : "Empty"] |
"
+ dat += "| Eyes: | [(glasses && !(glasses.flags&ABSTRACT)) ? html_encode(glasses) : "Empty"] |
"
if(slot_l_ear in obscured)
dat += "| Left Ear: | Obscured |
"
else
- dat += "| Left Ear: | [(l_ear && !(l_ear.flags&ABSTRACT)) ? l_ear : "Empty"] |
"
+ dat += "| Left Ear: | [(l_ear && !(l_ear.flags&ABSTRACT)) ? html_encode(l_ear) : "Empty"] |
"
if(slot_r_ear in obscured)
dat += "| Right Ear: | Obscured |
"
else
- dat += "| Right Ear: | [(r_ear && !(r_ear.flags&ABSTRACT)) ? r_ear : "Empty"] |
"
+ dat += "| Right Ear: | [(r_ear && !(r_ear.flags&ABSTRACT)) ? html_encode(r_ear) : "Empty"] |
"
dat += "| |
"
- dat += "| Exosuit: | [(wear_suit && !(wear_suit.flags&ABSTRACT)) ? wear_suit : "Empty"] |
"
+ dat += "| Exosuit: | [(wear_suit && !(wear_suit.flags&ABSTRACT)) ? html_encode(wear_suit) : "Empty"] |
"
if(wear_suit)
- dat += "| ↳Suit Storage: | [(s_store && !(s_store.flags&ABSTRACT)) ? s_store : "Empty"]"
+ dat += " |
| ↳Suit Storage: | [(s_store && !(s_store.flags&ABSTRACT)) ? html_encode(s_store) : "Empty"]"
if(has_breathable_mask && istype(s_store, /obj/item/tank))
dat += " [internal ? "Disable Internals" : "Set Internals"]"
dat += " |
"
@@ -348,17 +348,17 @@
if(slot_shoes in obscured)
dat += "| Shoes: | Obscured |
"
else
- dat += "| Shoes: | [(shoes && !(shoes.flags&ABSTRACT)) ? shoes : "Empty"] |
"
+ dat += "| Shoes: | [(shoes && !(shoes.flags&ABSTRACT)) ? html_encode(shoes) : "Empty"] |
"
if(slot_gloves in obscured)
dat += "| Gloves: | Obscured |
"
else
- dat += "| Gloves: | [(gloves && !(gloves.flags&ABSTRACT)) ? gloves : "Empty"] |
"
+ dat += "| Gloves: | [(gloves && !(gloves.flags&ABSTRACT)) ? html_encode(gloves) : "Empty"] |
"
if(slot_w_uniform in obscured)
dat += "| Uniform: | Obscured |
"
else
- dat += "| Uniform: | [(w_uniform && !(w_uniform.flags&ABSTRACT)) ? w_uniform : "Empty"] |
"
+ dat += "| Uniform: | [(w_uniform && !(w_uniform.flags&ABSTRACT)) ? html_encode(w_uniform) : "Empty"] |
"
if((w_uniform == null && !(dna && dna.species.nojumpsuit)) || (slot_w_uniform in obscured))
dat += "| ↳Pockets: |
"
@@ -367,7 +367,7 @@
dat += "| ↳Suit Sensors: |
"
dat += "| ↳PDA: |
"
else
- dat += "| ↳Belt: | [(belt && !(belt.flags&ABSTRACT)) ? belt : "Empty"]"
+ dat += " |
| ↳Belt: | [(belt && !(belt.flags&ABSTRACT)) ? html_encode(belt) : "Empty"]"
if(has_breathable_mask && istype(belt, /obj/item/tank))
dat += " [internal ? "Disable Internals" : "Set Internals"]"
dat += " |
"
@@ -387,8 +387,8 @@
else
dat += "Right (Empty)"
dat += ""
- dat += "| ↳ID: | [(wear_id && !(wear_id.flags&ABSTRACT)) ? wear_id : "Empty"] |
"
- dat += "| ↳PDA: | [(wear_pda && !(wear_pda.flags&ABSTRACT)) ? wear_pda : "Empty"] |
"
+ dat += "| ↳ID: | [(wear_id && !(wear_id.flags&ABSTRACT)) ? html_encode(wear_id) : "Empty"] |
"
+ dat += "| ↳PDA: | [(wear_pda && !(wear_pda.flags&ABSTRACT)) ? html_encode(wear_pda) : "Empty"] |
"
if(istype(w_uniform, /obj/item/clothing/under))
var/obj/item/clothing/under/U = w_uniform
diff --git a/code/modules/mob/living/simple_animal/friendly/dog.dm b/code/modules/mob/living/simple_animal/friendly/dog.dm
index cd66b3e9d90..73cf8f6a155 100644
--- a/code/modules/mob/living/simple_animal/friendly/dog.dm
+++ b/code/modules/mob/living/simple_animal/friendly/dog.dm
@@ -140,8 +140,8 @@
var/dat = "Inventory of [name]
"
- dat += "
Head: [inventory_head]" : "add_inv=head'>Nothing"]"
- dat += "
Back: [inventory_back]" : "add_inv=back'>Nothing"]"
+ dat += "
Head: [html_encode(inventory_head)]" : "add_inv=head'>Nothing"]"
+ dat += "
Back: [html_encode(inventory_back)]" : "add_inv=back'>Nothing"]"
dat += "
Collar: [pcollar]" : "add_inv=collar'>Nothing"]"
var/datum/browser/popup = new(user, "mob[UID()]", "[src]", 440, 250)
diff --git a/code/modules/mob/living/simple_animal/parrot.dm b/code/modules/mob/living/simple_animal/parrot.dm
index 18c7e17e655..2dfc5ca2376 100644
--- a/code/modules/mob/living/simple_animal/parrot.dm
+++ b/code/modules/mob/living/simple_animal/parrot.dm
@@ -137,10 +137,10 @@
var/dat = {"
Close
diff --git a/code/modules/mob/living/simple_animal/simple_animal.dm b/code/modules/mob/living/simple_animal/simple_animal.dm
index f117d03ccdb..7a34f746728 100644
--- a/code/modules/mob/living/simple_animal/simple_animal.dm
+++ b/code/modules/mob/living/simple_animal/simple_animal.dm
@@ -474,7 +474,7 @@
return
user.set_machine(src)
- var/dat = ""
+ var/dat = ""
dat += "Close"
var/datum/browser/popup = new(user, "mob\ref[src]", "[src]", 440, 250)
@@ -645,4 +645,3 @@
/mob/living/simple_animal/Login()
..()
walk(src, 0) // if mob is moving under ai control, then stop AI movement
-
diff --git a/code/modules/mob/mob.dm b/code/modules/mob/mob.dm
index 95538b18995..601b73a3a38 100644
--- a/code/modules/mob/mob.dm
+++ b/code/modules/mob/mob.dm
@@ -560,8 +560,8 @@ GLOBAL_LIST_INIT(slot_equipment_priority, list( \
/mob/proc/show_inv(mob/user)
user.set_machine(src)
var/dat = {"
Close