diff options
| author | Zefram <zefram@fysh.org> | 2014-04-29 17:53:43 +0100 |
|---|---|---|
| committer | Zefram <zefram@fysh.org> | 2014-04-29 17:53:43 +0100 |
| commit | 20cf4748864269a56c385137163c9a54139df40d (patch) | |
| tree | f35e4cd77645177cb8dfadb025e276b2634fc5a7 /bags.lua | |
| parent | 76a2337c59c36d35f7c10b884ec4a5e056b8f4a1 (diff) | |
Fix formspec injection issues
Diffstat (limited to 'bags.lua')
| -rw-r--r-- | bags.lua | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -13,10 +13,10 @@ unified_inventory.register_page("bags", { formspec = formspec.."button[4,2;2,0.5;bag3;Bag 3]" formspec = formspec.."button[6,2;2,0.5;bag4;Bag 4]" formspec = formspec.."listcolors[#00000000;#00000000]" - formspec = formspec.."list[detached:"..player_name.."_bags;bag1;0.5,1;1,1;]" - formspec = formspec.."list[detached:"..player_name.."_bags;bag2;2.5,1;1,1;]" - formspec = formspec.."list[detached:"..player_name.."_bags;bag3;4.5,1;1,1;]" - formspec = formspec.."list[detached:"..player_name.."_bags;bag4;6.5,1;1,1;]" + formspec = formspec.."list[detached:"..minetest.formspec_escape(player_name).."_bags;bag1;0.5,1;1,1;]" + formspec = formspec.."list[detached:"..minetest.formspec_escape(player_name).."_bags;bag2;2.5,1;1,1;]" + formspec = formspec.."list[detached:"..minetest.formspec_escape(player_name).."_bags;bag3;4.5,1;1,1;]" + formspec = formspec.."list[detached:"..minetest.formspec_escape(player_name).."_bags;bag4;6.5,1;1,1;]" return {formspec=formspec} end, }) |