mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-08-28 06:01:11 -05:00
Make sure to sanatise the tournament type
This commit is contained in:
@@ -124,7 +124,7 @@
|
||||
|
||||
switch (cmd) {
|
||||
case 'create':
|
||||
this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + data.join('|') + " Tournament has been created.</div>");
|
||||
this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + Tools.escapeHTML(data.join('|')) + " Tournament has been created.</div>");
|
||||
break;
|
||||
|
||||
case 'join':
|
||||
|
||||
Reference in New Issue
Block a user