diff options
author | Jesusaves <cpntb1@ymail.com> | 2024-06-11 01:36:14 -0300 |
---|---|---|
committer | Jesusaves <cpntb1@ymail.com> | 2024-06-11 01:36:14 -0300 |
commit | bca4cdcbbc4f098850d11a65d99e9b85b6a17165 (patch) | |
tree | 0ac167d567f30ea3b8245ac4afae487f4b392ce0 | |
parent | 8f406e3528ad17e87a715f0f7a1ce9daa50c0e1b (diff) | |
download | serverdata-bca4cdcbbc4f098850d11a65d99e9b85b6a17165.tar.gz serverdata-bca4cdcbbc4f098850d11a65d99e9b85b6a17165.tar.bz2 serverdata-bca4cdcbbc4f098850d11a65d99e9b85b6a17165.tar.xz serverdata-bca4cdcbbc4f098850d11a65d99e9b85b6a17165.zip |
[skip ci] some obvious sanitization issues
-rw-r--r-- | npc/functions/aurora.txt | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/npc/functions/aurora.txt b/npc/functions/aurora.txt index 0e2c81a60..9492b7ea5 100644 --- a/npc/functions/aurora.txt +++ b/npc/functions/aurora.txt @@ -814,7 +814,9 @@ function script FYRewardEvent { DelItemFromEveryPlayer(EventOre); */ // Specing wants scoreboards to be preserved - api_send(505, "[79, 21698, '', \""+.@score$+"\"]"); + // Needs sanitization, or "\n" breaks it + .@score$=replacestr(.@score$, "\n", "\\n"); + api_send(505, "[79, 21698, \"\", \""+.@score$+"\"]"); } consolebug "FYRewardEvent end %d", gettimetick(0); return; |