escape formspec defaults everywhere!

This commit is contained in:
tour 2024-01-05 13:42:26 +01:00
parent 1fa38df372
commit 05649573a4

View File

@ -8,7 +8,7 @@ predefined (optional): if valid, it will skip the selection formspec and direct
local context = chat_formspec.get_context(name)
local params = string.split(paramstr, ",", true)
if params[1] then
context.target = params[1]
context.target = minetest.formspec_escape(params[1])
end
if params[2] and chat_formspec.predefined[params[2]] then
context.id = params[2]