Make sure to sanatise the tournament type

This commit is contained in:
小太 2013-09-13 22:16:09 +10:00
parent a2aa4ac7d2
commit c449f4ef73

View File

@ -124,7 +124,7 @@
switch (cmd) {
case 'create':
this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + data.join('|') + " Tournament has been created.</div>");
this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + Tools.escapeHTML(data.join('|')) + " Tournament has been created.</div>");
break;
case 'join':