Adds img to list of banned html tags; fixes an easy way to circumvent the check

This commit is contained in:
Citinited
2018-10-09 20:48:54 +01:00
parent 3a8c6e4732
commit f9f5cfbe40

View File

@@ -248,7 +248,7 @@
But I like HTML, so back to no sanitizing.*/
var/message = interpreter.GetVar("$content")
var/regex/bannedTags = new ("(<script|<iframe|<video|<audio|<embed|<svg)")
var/regex/bannedTags = new ("(<script|<iframe|<video|<audio|<embed|<svg|<img)", "i")
if(bannedTags.Find(message)) //uh oh
message_admins("Warning: Current Telecomms script contains banned html. Stripping message.")
log_admin("Warning: Current Telecomms script contains banned html. Stripping message.")