cyberpresidentvanellope/Paradise
1
0
Fork 0
mirror of https://github.com/ParadiseSS13/Paradise.git synced 2026-08-22 11:37:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Make img a bit more secure

Browse Source
This commit is contained in:
Tayyyyyyy
2019-08-12 21:51:07 -07:00
parent 48c002b361
commit 6c6ef64ccb
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/__HELPERS/text.dm
+4 -1
View File
@@ -546,7 +546,8 @@ proc/checkhtml(var/t)
return text
/proc/convert_pencode_arg(text, tag, arg)
arg = replacetext(replacetext(html_encode(arg), "'", ""), "\"", "")
arg = sanitize_simple(html_encode(arg), list("''"="","\""="", "?"=""))
if(tag == "class")
return "<span class='[arg]'>"
@@ -554,6 +555,8 @@ proc/checkhtml(var/t)
return "<span style='[arg]'>"
if(tag == "img")
if(dd_hasprefix(arg, "byond:") || dd_hasprefix(arg, "file:"))
return text
var/list/img_props = splittext(arg, ";")
if(img_props.len == 3)
return "<img src='[img_props[1]]' width='[img_props[2]]' height='[img_props[3]]'>"