Merge pull request #11273 from Arturlang/blob_broacast_exploit

[s] Fixes blob broadcast HTML Injection.
2020-02-28 04:28:41 -07:00
parent 879032c52f c6fcffe949
commit d0eebdbb02
1 changed files with 1 additions and 1 deletions
--- a/code/modules/antagonists/blob/blob/powers.dm
+++ b/code/modules/antagonists/blob/blob/powers.dm
@@ -321,7 +321,7 @@
 	set category = "Blob"
 	set name = "Blob Broadcast"
 	set desc = "Speak with your blob spores and blobbernauts as your mouthpieces."
-	var/speak_text = input(src, "What would you like to say with your minions?", "Blob Broadcast", null) as text
+	var/speak_text = stripped_input(src, "What would you like to say with your minions?", "Blob Broadcast", null)
 	if(!speak_text)
 		return
 	else