aboutsummaryrefslogtreecommitdiff
path: root/font_api
diff options
context:
space:
mode:
authorluk3yx <luk3yx@users.noreply.github.com>2023-12-04 21:28:14 +1300
committerGitHub <noreply@github.com>2023-12-04 19:28:14 +1100
commit03953f0fc0decad503013995cb74bdead4fbe224 (patch)
tree380381471fa9dfbc70b45a5bbc37ebe9893b9450 /font_api
parentcdc3cf55f5b9314236cb3c8454936e84864c2bf6 (diff)
downloaddisplay_modpack_no_craft-03953f0fc0decad503013995cb74bdead4fbe224.tar.gz
display_modpack_no_craft-03953f0fc0decad503013995cb74bdead4fbe224.zip
Improve exploit fix (#8)
Diffstat (limited to 'font_api')
-rw-r--r--font_api/fontform.lua8
1 files changed, 1 insertions, 7 deletions
diff --git a/font_api/fontform.lua b/font_api/fontform.lua
index fb054e0..1388a43 100644
--- a/font_api/fontform.lua
+++ b/font_api/fontform.lua
@@ -54,13 +54,7 @@ local function show_node_formspec(playername, pos)
fs = fs:gsub("context", nodemeta)
-- Change all ${} to their corresponding metadata values
- fs = fs:gsub("(.)${(.-)}", function(prefix, key)
- -- Don't alter escaped keys
- if prefix == "\\" then
- return prefix .. "${" .. key .. "}"
- end
-
- -- Get the node meta value
+ fs = fs:gsub("([^\\])${(.-)}", function(prefix, key)
return prefix .. minetest.formspec_escape(meta:get_string(key))
end)