From 82a1a16b3824f88aea071b6341e185817e7845e6 Mon Sep 17 00:00:00 2001
From: tkdrg <tkdrg@users.noreply.github.com>
Date: Sun, 11 Jan 2015 20:10:37 -0300
Subject: [PATCH] Fixes XSS vuln in changeling mimic voice

Report and picture by HoaxIT/ERIKHANSON
See https://github.com/tgstation/-tg-station/issues/6975
---
 code/game/gamemodes/changeling/changeling_powers.dm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/code/game/gamemodes/changeling/changeling_powers.dm b/code/game/gamemodes/changeling/changeling_powers.dm
index e8a7f68c5da..5f7a98091c3 100644
--- a/code/game/gamemodes/changeling/changeling_powers.dm
+++ b/code/game/gamemodes/changeling/changeling_powers.dm
@@ -729,7 +729,7 @@ var/list/datum/dna/hivemind_bank = list()
 		src << "<span class='notice'>We return our vocal glands to their original location.</span>"
 		return
 
-	var/mimic_voice = input("Enter a name to mimic.", "Mimic Voice", null) as text
+	var/mimic_voice = stripped_input(usr, "Enter a name to mimic.", "Mimic Voice", null, MAX_NAME_LEN)
 	if(!mimic_voice)
 		return