Always escape user provided data in mainmenu fields
[oweals/minetest.git] / builtin / mainmenu / tab_simple_main.lua
1 --Minetest
2 --Copyright (C) 2013 sapier
3 --
4 --This program is free software; you can redistribute it and/or modify
5 --it under the terms of the GNU Lesser General Public License as published by
6 --the Free Software Foundation; either version 2.1 of the License, or
7 --(at your option) any later version.
8 --
9 --This program is distributed in the hope that it will be useful,
10 --but WITHOUT ANY WARRANTY; without even the implied warranty of
11 --MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12 --GNU Lesser General Public License for more details.
13 --
14 --You should have received a copy of the GNU Lesser General Public License along
15 --with this program; if not, write to the Free Software Foundation, Inc.,
16 --51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
17
18 --------------------------------------------------------------------------------
19 local function get_formspec(tabview, name, tabdata)
20         local retval = ""
21
22         local render_details = dump(core.setting_getbool("public_serverlist"))
23
24         retval = retval ..
25                 "label[8,0.5;".. fgettext("Name/Password") .. "]" ..
26                 "field[0.25,3.25;5.5,0.5;te_address;;" ..
27                 core.formspec_escape(core.setting_get("address")) .."]" ..
28                 "field[5.75,3.25;2.25,0.5;te_port;;" ..
29                 core.formspec_escape(core.setting_get("remote_port")) .."]" ..
30                 "checkbox[8,-0.25;cb_public_serverlist;".. fgettext("Public Serverlist") .. ";" ..
31                 render_details .. "]"
32
33         retval = retval ..
34                 "button[8,2.5;4,1.5;btn_mp_connect;".. fgettext("Connect") .. "]" ..
35                 "field[8.75,1.5;3.5,0.5;te_name;;" ..
36                 core.formspec_escape(core.setting_get("name")) .."]" ..
37                 "pwdfield[8.75,2.3;3.5,0.5;te_pwd;]"
38
39         --favourites
40         retval = retval ..
41                 "textlist[-0.05,0.0;7.55,2.75;favourites;"
42
43         if #menudata.favorites > 0 then
44                 retval = retval .. render_favorite(menudata.favorites[1],render_details)
45
46                 for i=2,#menudata.favorites,1 do
47                         retval = retval .. "," .. render_favorite(menudata.favorites[i],render_details)
48                 end
49         end
50
51         if tabdata.fav_selected ~= nil then
52                 retval = retval .. ";" .. tabdata.fav_selected .. "]"
53         else
54                 retval = retval .. ";0]"
55         end
56
57         -- separator
58         retval = retval ..
59                 "box[-0.3,3.75;12.4,0.1;#FFFFFF]"
60
61         -- checkboxes
62         retval = retval ..
63                 "checkbox[1.0,3.9;cb_creative;".. fgettext("Creative Mode") .. ";" ..
64                 dump(core.setting_getbool("creative_mode")) .. "]"..
65                 "checkbox[5.0,3.9;cb_damage;".. fgettext("Enable Damage") .. ";" ..
66                 dump(core.setting_getbool("enable_damage")) .. "]" ..
67                 "checkbox[8,3.9;cb_fly_mode;".. fgettext("Fly mode") .. ";" ..
68                 dump(core.setting_getbool("free_move")) .. "]"
69         -- buttons
70         retval = retval ..
71                 "button[2.0,4.5;6,1.5;btn_start_singleplayer;" .. fgettext("Start Singleplayer") .. "]" ..
72                 "button[8.25,4.5;2.5,1.5;btn_config_sp_world;" .. fgettext("Config mods") .. "]"
73
74         return retval
75 end
76
77 --------------------------------------------------------------------------------
78
79 local function main_button_handler(tabview, fields, name, tabdata)
80
81         if fields["btn_start_singleplayer"] then
82                 gamedata.selected_world = gamedata.worldindex
83                 gamedata.singleplayer   = true
84                 core.start()
85                 return true
86         end
87
88         if fields["favourites"] ~= nil then
89                 local event = core.explode_textlist_event(fields["favourites"])
90
91                 if event.type == "CHG" then
92                         if event.index <= #menudata.favorites then
93                                 local address = menudata.favorites[event.index].address
94                                 local port = menudata.favorites[event.index].port
95
96                                 if address ~= nil and
97                                         port ~= nil then
98                                         core.setting_set("address",address)
99                                         core.setting_set("remote_port",port)
100                                 end
101
102                                 tabdata.fav_selected = event.index
103                         end
104                 end
105                 return true
106         end
107
108         if fields["cb_public_serverlist"] ~= nil then
109                 core.setting_set("public_serverlist", fields["cb_public_serverlist"])
110
111                 if core.setting_getbool("public_serverlist") then
112                         asyncOnlineFavourites()
113                 else
114                         menudata.favorites = core.get_favorites("local")
115                 end
116                 return true
117         end
118
119         if fields["cb_creative"] then
120                 core.setting_set("creative_mode", fields["cb_creative"])
121                 return true
122         end
123
124         if fields["cb_damage"] then
125                 core.setting_set("enable_damage", fields["cb_damage"])
126                 return true
127         end
128
129         if fields["cb_fly_mode"] then
130                 core.setting_set("free_move", fields["cb_fly_mode"])
131                 return true
132         end
133
134         if fields["btn_mp_connect"] ~= nil or
135                 fields["key_enter"] ~= nil then
136
137                 gamedata.playername             = fields["te_name"]
138                 gamedata.password               = fields["te_pwd"]
139                 gamedata.address                = fields["te_address"]
140                 gamedata.port                   = fields["te_port"]
141
142                 local fav_idx = core.get_textlist_index("favourites")
143
144                 if fav_idx ~= nil and fav_idx <= #menudata.favorites and
145                         menudata.favorites[fav_idx].address == fields["te_address"] and
146                         menudata.favorites[fav_idx].port    == fields["te_port"] then
147
148                         gamedata.servername                     = menudata.favorites[fav_idx].name
149                         gamedata.serverdescription      = menudata.favorites[fav_idx].description
150                 else
151                         gamedata.servername                     = ""
152                         gamedata.serverdescription      = ""
153                 end
154
155                 gamedata.selected_world = 0
156
157                 core.setting_set("address",fields["te_address"])
158                 core.setting_set("remote_port",fields["te_port"])
159
160                 core.start()
161                 return true
162         end
163
164         if fields["btn_config_sp_world"] ~= nil then
165                 local configdialog = create_configure_world_dlg(1)
166
167                 if (configdialog ~= nil) then
168                         configdialog:set_parent(tabview)
169                         tabview:hide()
170                         configdialog:show()
171                 end
172                 return true
173         end
174 end
175
176 --------------------------------------------------------------------------------
177 local function on_activate(type,old_tab,new_tab)
178         if type == "LEAVE" then
179                 return
180         end
181         if core.setting_getbool("public_serverlist") then
182                 asyncOnlineFavourites()
183         else
184                 menudata.favorites = core.get_favorites("local")
185         end
186 end
187
188 --------------------------------------------------------------------------------
189 tab_simple_main = {
190         name = "main",
191         caption = fgettext("Main"),
192         cbf_formspec = get_formspec,
193         cbf_button_handler = main_button_handler,
194         on_change = on_activate
195         }