Disable HTML encoding for tcomms filter input (#26783)

ParadiseSS13 · Sep 22, 2024 · 17931d5 · 17931d5
1 parent b3cc376
commit 17931d5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/code/game/machinery/tcomms/tcomms_core.dm b/code/game/machinery/tcomms/tcomms_core.dm
@@ -323,7 +323,7 @@
 
 		if("add_filter")
 			// This is a stripped input because I did NOT come this far for this system to be abused by HTML injection
-			var/name_to_add = tgui_input_text(usr, "Enter a name to add to the filtering list", "Name Entry")
+			var/name_to_add = tgui_input_text(usr, "Enter a name to add to the filtering list", "Name Entry", encode = FALSE)
 			if(!name_to_add)
 				return
 			if(name_to_add in nttc.filtering)