From 7673384890df20635ceae6e3a4d4830b1b91fdd4 Mon Sep 17 00:00:00 2001 From: CitadelStationBot Date: Wed, 4 Jul 2018 19:40:10 -0500 Subject: [PATCH] [MIRROR] [s] Fixes announcement XSS (#7324) * [s] Fixes announcement XSS * Merge pull request #38892 from ThatLing/robots-are-very-delicate [s] Fixes announcement XSS --- code/__HELPERS/priority_announce.dm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/__HELPERS/priority_announce.dm b/code/__HELPERS/priority_announce.dm index 9b6b601e69..bbaf7b275d 100644 --- a/code/__HELPERS/priority_announce.dm +++ b/code/__HELPERS/priority_announce.dm @@ -55,7 +55,7 @@ for(var/mob/M in GLOB.player_list) if(!isnewplayer(M) && M.can_hear()) - to_chat(M, "[title]
[message]

") + to_chat(M, "[html_encode(title)]
[html_encode(message)]

") if(M.client.prefs.toggles & SOUND_ANNOUNCEMENTS) if(alert) SEND_SOUND(M, sound('sound/misc/notice1.ogg'))