From 03953f0fc0decad503013995cb74bdead4fbe224 Mon Sep 17 00:00:00 2001
From: luk3yx <luk3yx@users.noreply.github.com>
Date: Mon, 4 Dec 2023 21:28:14 +1300
Subject: Improve exploit fix (#8)

---
 font_api/fontform.lua | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

(limited to 'font_api')

diff --git a/font_api/fontform.lua b/font_api/fontform.lua
index fb054e0..1388a43 100644
--- a/font_api/fontform.lua
+++ b/font_api/fontform.lua
@@ -54,13 +54,7 @@ local function show_node_formspec(playername, pos)
 	fs = fs:gsub("context", nodemeta)
 
 	-- Change all ${} to their corresponding metadata values
-	fs = fs:gsub("(.)${(.-)}", function(prefix, key)
-		-- Don't alter escaped keys
-		if prefix == "\\" then
-			return prefix .. "${" .. key .. "}"
-		end
-
-		-- Get the node meta value
+	fs = fs:gsub("([^\\])${(.-)}", function(prefix, key)
 		return prefix .. minetest.formspec_escape(meta:get_string(key))
 	end)
 
-- 
cgit v1.2.3