[MIRROR] Fixes netpod href exploit (#2045)

* Fixes netpod href exploit (#82698) ## About The Pull Request Can't have fits in detroit ## Why It's Good For The Game Fixes #81616 ## Changelog :cl: fix: Netpods have had their security against exploits increased. /:cl: --------- Co-authored-by: Kapu1178 <[email protected]> * Fixes netpod href exploit --------- Co-authored-by: Jeremiah <[email protected]> Co-authored-by: Kapu1178 <[email protected]>
Fluffy-Frontier · Apr 18, 2024 · ec2ed1c · ec2ed1c
1 parent 108a4cd
commit ec2ed1c
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/code/modules/bitrunning/objects/netpod.dm b/code/modules/bitrunning/objects/netpod.dm
@@ -438,8 +438,16 @@
 /// Resolves a path to an outfit.
 /obj/machinery/netpod/proc/resolve_outfit(text)
 	var/path = text2path(text)
-	if(ispath(path, /datum/outfit))
-		return path
+	if(!ispath(path, /datum/outfit))
+		return
+
+	for(var/wardrobe in cached_outfits)
+		for(var/outfit in wardrobe["outfits"])
+			if(path == outfit["path"])
+				return path
+
+	message_admins("[usr]:[usr.ckey] attempted to select an unavailable outfit from a netpod")
+	return
 
 /// Severs the connection with the current avatar
 /obj/machinery/netpod/proc/sever_connection()