Page MenuHomeFeedback Tracker

HTML Injection in player names
New, NormalPublic

Description

Please provide the following when creating the Ticket:

Game Version number:
Modded?: (Yes/No)
If modded, please list the mods:

Issue Description:

Players can join a server with a name like "<h1><h1><h1><h1>HORRIBLE WORD" and this is actually displayed in massive font in EVERYONE'S SCREEN.

This is a lack of rudimentary input sanitisation that the game should be doing and it's not.

Please fix this.

Details

Severity
None
Resolution
Open
Reproducibility
N/A
Operating System
Windows 10 x64
Category
General
Steps To Reproduce

Join a server with the name "<h1><h1><h1><h1>HORRIBLE WORD"

Event Timeline

Gibbon created this task.Sun, Mar 2, 4:17 PM