diff options
author | luk3yx <luk3yx@users.noreply.github.com> | 2023-12-04 21:28:14 +1300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-12-04 19:28:14 +1100 |
commit | 03953f0fc0decad503013995cb74bdead4fbe224 (patch) | |
tree | 380381471fa9dfbc70b45a5bbc37ebe9893b9450 /font_api | |
parent | cdc3cf55f5b9314236cb3c8454936e84864c2bf6 (diff) | |
download | display_modpack_no_craft-03953f0fc0decad503013995cb74bdead4fbe224.tar.gz display_modpack_no_craft-03953f0fc0decad503013995cb74bdead4fbe224.zip |
Improve exploit fix (#8)
Diffstat (limited to 'font_api')
-rw-r--r-- | font_api/fontform.lua | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/font_api/fontform.lua b/font_api/fontform.lua index fb054e0..1388a43 100644 --- a/font_api/fontform.lua +++ b/font_api/fontform.lua @@ -54,13 +54,7 @@ local function show_node_formspec(playername, pos) fs = fs:gsub("context", nodemeta) -- Change all ${} to their corresponding metadata values - fs = fs:gsub("(.)${(.-)}", function(prefix, key) - -- Don't alter escaped keys - if prefix == "\\" then - return prefix .. "${" .. key .. "}" - end - - -- Get the node meta value + fs = fs:gsub("([^\\])${(.-)}", function(prefix, key) return prefix .. minetest.formspec_escape(meta:get_string(key)) end) |