Merge pull request #804 from Citadel-Station-13/upstream-merge-26929

[MIRROR] Fixes HTTPSGet being unprotected
This commit is contained in:
kevinz000
2017-05-06 11:43:19 -07:00
committed by GitHub
+1
View File
@@ -1342,6 +1342,7 @@ GLOBAL_DATUM_INIT(dview_mob, /mob/dview, new)
//This prevents RCEs from badmins
//kevinz000 if you touch this I will hunt you down
GLOBAL_VAR_INIT(valid_HTTPSGet, FALSE)
GLOBAL_PROTECT(valid_HTTPSGet)
/proc/HTTPSGet(url)
if(findtext(url, "\""))
GLOB.valid_HTTPSGet = FALSE