Sanitization and better TGUI utilization

- Sanitizes some more things so you can't put HTML into it.
- Utilizes TGUI better to show the user the max they can post.
- Limits some things like circuits so you can't insert 50000 characters.
This commit is contained in:
C.L
2022-09-29 23:02:23 -04:00
parent 9f7e4f0d7c
commit 6236a13194
23 changed files with 67 additions and 44 deletions
+5 -1
View File
@@ -86,10 +86,14 @@
if (!holder)
return
var/msg = sanitize(tgui_input_text(usr, "Message:", text("Subtle PM to [M.key]")))
var/msg = tgui_input_text(usr, "Message:", text("Subtle PM to [M.key]"))
if (!msg)
return
if(!(msg[1] == "<" && msg[length(msg)] == ">")) //You can use HTML but only if the whole thing is HTML. Tries to prevent admin 'accidents'.
msg = sanitize(msg)
if(usr)
if (usr.client)
if(usr.client.holder)