[MIRROR] [s] Fixes announcement XSS (#7324)
* [s] Fixes announcement XSS * Merge pull request #38892 from ThatLing/robots-are-very-delicate [s] Fixes announcement XSS
This commit is contained in:
committed by
kevinz000
parent
abc32ed0df
commit
7673384890
@@ -55,7 +55,7 @@
|
||||
|
||||
for(var/mob/M in GLOB.player_list)
|
||||
if(!isnewplayer(M) && M.can_hear())
|
||||
to_chat(M, "<span class='big bold'><font color = red>[title]</font color><BR>[message]</span><BR>")
|
||||
to_chat(M, "<span class='big bold'><font color = red>[html_encode(title)]</font color><BR>[html_encode(message)]</span><BR>")
|
||||
if(M.client.prefs.toggles & SOUND_ANNOUNCEMENTS)
|
||||
if(alert)
|
||||
SEND_SOUND(M, sound('sound/misc/notice1.ogg'))
|
||||
|
||||
Reference in New Issue
Block a user