From 190ec39e2d932f612f29f712d0ab4a721c806520 Mon Sep 17 00:00:00 2001 From: divverent Date: Tue, 3 Nov 2009 21:12:19 +0000 Subject: [PATCH] hide private cvars from the output of cvar name and cvarlist commands to prevent password sniffing by evil CSQC tab completion still shows their value because that cannot be triggered by CSQC code git-svn-id: svn://svn.icculus.org/twilight/trunk/darkplaces@9421 d7cf8633-e32d-0410-b094-e92efae38249 --- cvar.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cvar.c b/cvar.c index 822f6e5e..afdbcf05 100644 --- a/cvar.c +++ b/cvar.c @@ -563,7 +563,7 @@ qboolean Cvar_Command (void) // perform a variable print or set if (Cmd_Argc() == 1) { - Con_Printf("\"%s\" is \"%s\" [\"%s\"]\n", v->name, v->string, v->defstring); + Con_Printf("\"%s\" is \"%s\" [\"%s\"]\n", v->name, ((v->flags & CVAR_PRIVATE) ? "********" : v->string), v->defstring); return true; } @@ -695,7 +695,7 @@ void Cvar_List_f (void) if (len && (ispattern ? !matchpattern_with_separator(cvar->name, partial, false, "", false) : strncmp (partial,cvar->name,len))) continue; - Con_Printf("%s is \"%s\" [\"%s\"] %s\n", cvar->name, cvar->string, cvar->defstring, cvar->description); + Con_Printf("%s is \"%s\" [\"%s\"] %s\n", cvar->name, ((cvar->flags & CVAR_PRIVATE) ? "********" : cvar->string), cvar->defstring, cvar->description); count++; } -- 2.39.2