From 17931d50558bb7a3d580d2700ab2533c3e26e4c0 Mon Sep 17 00:00:00 2001 From: Mikhail Dzianishchyts Date: Mon, 23 Sep 2024 02:07:59 +0300 Subject: [PATCH] Disable HTML encoding for tcomms filter input (#26783) --- code/game/machinery/tcomms/tcomms_core.dm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/game/machinery/tcomms/tcomms_core.dm b/code/game/machinery/tcomms/tcomms_core.dm index 6d191a0ec5ae..0d72b68d1d40 100644 --- a/code/game/machinery/tcomms/tcomms_core.dm +++ b/code/game/machinery/tcomms/tcomms_core.dm @@ -323,7 +323,7 @@ if("add_filter") // This is a stripped input because I did NOT come this far for this system to be abused by HTML injection - var/name_to_add = tgui_input_text(usr, "Enter a name to add to the filtering list", "Name Entry") + var/name_to_add = tgui_input_text(usr, "Enter a name to add to the filtering list", "Name Entry", encode = FALSE) if(!name_to_add) return if(name_to_add in nttc.filtering)