Earu/EasyChat
1
0
Fork 0
mirror of https://github.com/Earu/EasyChat.git synced 2025-03-04 03:13:20 -05:00
Code Issues Packages Releases Wiki Activity

fix RCE

Browse Source
This commit is contained in:
Earu 2021-11-28 16:08:04 +01:00
parent f834f2c3a6
commit 699b08074a
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lua/easychat/client/vgui/richtextx.lua
View File

@ -190,6 +190,9 @@ local AVERAGE_AMOUNT_OF_ELEMENTS_PER_LINE = 5
function PANEL:AppendText(text)
text = text:JavascriptSafe()
-- turns out JavascriptSafe isnt safe, also cant escape ` apparently
text = text:gsub("`", "")
local limit = GetConVar("easychat_modern_text_history_limit"):GetInt() * AVERAGE_AMOUNT_OF_ELEMENTS_PER_LINE
local css_color = ("rgb(%d,%d,%d)"):format(self.CurrentColor.r, self.CurrentColor.g, self.CurrentColor.b)
local js = (self.ClickableTextValue and [[