mirror of
https://github.com/yogstation13/Yogstation.git
synced 2025-02-26 09:04:50 +00:00
84b1e3d71e
There's a certain issue of people spoofing real byond links to admins. Now all links should come with a generated key that is validated when the Topic is run. Added DEBUG_ADMIN_HREFS to debug this system while we test it (Allows hrefs without tokens and complains about it in the logs) Just add [HrefToken()] as a parameter to all admin hrefs. Anything that ends up running through VV or Holder will be verified
10 lines
443 B
Plaintext
10 lines
443 B
Plaintext
/datum/admins/proc/create_turf(mob/user)
|
|
var/static/create_turf_html
|
|
if (!create_turf_html)
|
|
var/turfjs = null
|
|
turfjs = jointext(typesof(/turf), ";")
|
|
create_turf_html = file2text('html/create_object.html')
|
|
create_turf_html = replacetext(create_turf_html, "null /* object types */", "\"[turfjs]\"")
|
|
|
|
user << browse(replacetext(create_turf_html, "/* ref src */", "\ref[src];[HrefToken()]"), "window=create_turf;size=425x475")
|