Fix config loading exploit (#36286)

This commit is contained in:
Jordan Brown
2018-03-10 15:51:32 -05:00
committed by CitadelStationBot
parent aa7b9f192f
commit ad6a3e810f
@@ -67,6 +67,9 @@
entries_by_type -= CE.type
/datum/controller/configuration/proc/LoadEntries(filename, list/stack = list())
if(IsAdminAdvancedProcCall())
return
var/filename_to_test = world.system_type == MS_WINDOWS ? lowertext(filename) : filename
if(filename_to_test in stack)
log_config("Warning: Config recursion detected ([english_list(stack)]), breaking!")