forked from minetest/minetest_game
Validate & sanitize formspec fields (#3022)
This commit is contained in:
@ -2597,12 +2597,12 @@ local function register_sign(material, desc, def)
|
||||
if not text then
|
||||
return
|
||||
end
|
||||
if string.len(text) > 512 then
|
||||
if #text > 512 then
|
||||
minetest.chat_send_player(player_name, S("Text too long"))
|
||||
return
|
||||
end
|
||||
default.log_player_action(sender, "wrote \"" .. text ..
|
||||
"\" to the sign at", pos)
|
||||
text = text:gsub("[%z-\8\11-\31\127]", "") -- strip naughty control characters (keeps \t and \n)
|
||||
default.log_player_action(sender, ("wrote %q to the sign at"):format(text), pos)
|
||||
local meta = minetest.get_meta(pos)
|
||||
meta:set_string("text", text)
|
||||
|
||||
|
Reference in New Issue
Block a user