luanti-org/minetest_game
1
0
Fork 2
mirror of https://github.com/luanti-org/minetest_game.git synced 2025-11-04 09:15:29 +01:00
Code Activity

Validate & sanitize formspec fields

Browse Source
This commit is contained in:
Lars Mueller
2023-03-30 21:11:59 +02:00
parent 8eb4437ac8
commit 8ccce750c6
4 changed files with 16 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
mods/creative/inventory.lua
View File

@@ -191,10 +191,13 @@ function creative.register_tab(name, title, items)
inv.start_i = 0
inv.filter = ""
sfinv.set_player_inventory_formspec(player, context)
elseif fields.creative_search or
fields.key_enter_field == "creative_filter" then
elseif (fields.creative_search or
fields.key_enter_field == "creative_filter")
and fields.creative_filter then
inv.start_i = 0
inv.filter = fields.creative_filter:lower()
inv.filter = fields.creative_filter:sub(1, 1e3) -- truncate to a sane length
:gsub("[%z-\8\11-\31\127]", "") -- strip naughty control characters (keeps \t and \n)
:lower() -- search is case insensitive
sfinv.set_player_inventory_formspec(player, context)
elseif not fields.quit then
local start_i = inv.start_i or 0