Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[MIRROR] Fixes a variety of input stalling exploits #2852

Merged
merged 1 commit into from
Apr 13, 2024

Conversation

Steals-The-PRs
Copy link
Collaborator

Mirrored on Nova: NovaSector/NovaSector#1933
Original PR: tgstation/tgstation#82577

About The Pull Request

Fixes the following input stalling exploits (maybe missed some):

  • Changing GPS tag
  • Setting teleporter destination
  • Request Console Reply
  • Various AI law board interactions
    • Note, I used is_holding but technically this means these fail with telekinesis. I can swap them to can_perform_action(...), which allows TK, but I noticed some places explicitly deny TK interactions with Ai law boards. Not sure which is preferred.
  • Borg Rename Board
  • Plumbing Machines and Ducts
  • APCs and SMES terminal placements
  • Stargazers Telepathy
  • Go Go Gadget Hat

Changelog

🆑 Melbert
fix: You can't change the GPS tag of something unless you can actually use the GPS
fix: You can't set the teleporter to a location unless you can actually use the teleporter
fix: You can't reply to request console requests unless you can actually use the console
fix: You can't update AI lawboards unless you're actually holding them
fix: You can't update a borg rename board unless you're actually holding it
fix: You can't mess with plumbing machines unless you can actually use them
fix: You can't recolor / relayer ducts unless you're actually holding them
fix: You can't magically wire APCs and SMESs unless you're right by them
fix: You can't use Stargazer Telepathy on people who you can't see
fix: You can't configure the Inspector Hat unless you can actually use it
/:cl:

* Fixes a variety of input stalling exploits (#82577)

## About The Pull Request

Fixes the following input stalling exploits (maybe missed some): 

- Changing GPS tag 
- Setting teleporter destination
- Request Console Reply
- Various AI law board interactions
- Note, I used `is_holding` but technically this means these fail with
telekinesis. I can swap them to `can_perform_action(...)`, which allows
TK, but I noticed some places explicitly deny TK interactions with Ai
law boards. Not sure which is preferred.
- Borg Rename Board
- Plumbing Machines and Ducts
- APCs and SMES terminal placements
- Stargazers Telepathy
- Go Go Gadget Hat

## Changelog

:cl: Melbert
fix: You can't change the GPS tag of something unless you can actually
use the GPS
fix: You can't set the teleporter to a location unless you can actually
use the teleporter
fix: You can't reply to request console requests unless you can actually
use the console
fix: You can't update AI lawboards unless you're actually holding them 
fix: You can't update a borg rename board unless you're actually holding
it
fix: You can't mess with plumbing machines unless you can actually use
them
fix: You can't recolor / relayer ducts unless you're actually holding
them
fix: You can't magically wire APCs and SMESs unless you're right by them
fix: You can't use Stargazer Telepathy on people who you can't see
fix: You can't configure the Inspector Hat unless you can actually use
it
/:cl:

* Fixes a variety of input stalling exploits

---------

Co-authored-by: MrMelbert <[email protected]>
@ReezeBL ReezeBL merged commit 5b141e4 into master Apr 13, 2024
26 checks passed
@ReezeBL ReezeBL deleted the upstream-mirror-1933 branch April 13, 2024 12:51
AnywayFarus added a commit that referenced this pull request Apr 13, 2024
Iajret pushed a commit that referenced this pull request Jun 28, 2024
* Reduce disposals damage by 90%

* Disable hurtsposals off station-level

* Reduce hurtsposals nerf to 60% from 90%

Co-authored-by: Bloop <[email protected]>

* Update modular_nova/modules/hurtsposals/code/pipe.dm

---------

Co-authored-by: Bloop <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants