From 05649573a4be18a1874af14611f026509fcf2368 Mon Sep 17 00:00:00 2001
From: tour <yl_tour@posteo.de>
Date: Fri, 5 Jan 2024 13:42:26 +0100
Subject: [PATCH] escape formspec defaults everywhere!

---
 chatcommands.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/chatcommands.lua b/chatcommands.lua
index 0bd5026..0315761 100644
--- a/chatcommands.lua
+++ b/chatcommands.lua
@@ -8,7 +8,7 @@ predefined (optional):  if valid, it will skip the selection formspec and direct
         local context = chat_formspec.get_context(name)
         local params = string.split(paramstr, ",", true)
         if params[1] then
-            context.target = params[1]
+            context.target = minetest.formspec_escape(params[1])
         end
         if params[2] and chat_formspec.predefined[params[2]] then
             context.id = params[2]