Merge branch 'exploit-fix' into 'dev'

Exploit fix

See merge request !2344

game/overworld-town/loc-island/build.twee

@@ -521,8 +521,7 @@ You sit down with a few pieces of wood, and a sharp rock. With a little time, yo
 	<<if $island[$island.home].decoration is undefined or $island[$island.home].decoration is "">>
 		<<set $island[$island.home].decoration to "figurines">>
 	<</if>>
-	<<set $island[$island.home].decoration to Util.escape($island[$island.home].decoration)>>
-	<<run $island[$island.home].decoration.replace("[","")>><<run $island[$island.home].decoration.replace("]","")>><<run $island[$island.home].decoration.replace("|","")>>
+	<<set $island[$island.home].decoration to Util.escape($island[$island.home].decoration).replaceAll("[", "&#91;").replaceAll("]", "&#93;")>>>>
 <</link>>
 <br>
 

game/overworld-town/loc-museum/bdsm.twee

@@ -618,8 +618,7 @@ What should your safe word be? <<if $wintersafeword is "" or $wintersafeword is
 
 <<link [[Next|Museum Horse Extreme]]>>
 	<<if $wintersafeword is "" or $wintersafeword is undefined>><<set $wintersafeword to "Marshmallow">><</if>>
-	<<set $wintersafeword to Util.escape($wintersafeword)>>
-	<<run $wintersafeword.replace("[","")>><<run $wintersafeword.replace("]","")>><<run $wintersafeword.replace("|","")>>
+	<<set $wintersafeword to Util.escape($wintersafeword).replaceAll("[", "&#91;").replaceAll("]", "&#93;")>>
 <</link>>
 <br>
 

game/overworld-town/loc-shop/furniture.twee

@@ -100,8 +100,7 @@ You approach the paperhangings corner. Samples of pre-made posters and wallpaper
 		<<link [['Buy (£' + _posterCost / 50 + ')'|Furniture Shop Papers]]>>
 			<<set $money -= _posterCost * 2>>
 			<<if _chosenPosterCustom is "" or _chosenPosterCustom is undefined>><<set _chosenPosterCustom to "custom design">><</if>>
-			<<set _normalisedName to Util.escape(_chosenPosterCustom)>>
-			<<run _normalisedName.replace("[","")>><<run _normalisedName.replace("]","")>><<run _normalisedName.replace("|","")>>
+			<<set _normalisedName to Util.escape(_chosenPosterCustom).replaceAll("[", "&#91;").replaceAll("]", "&#93;")>>
 			<<run Furniture.set('poster', 'poster', {
 				name	: _normalisedName,
 				nameCap	: _normalisedName.toUpperFirst()
@@ -164,8 +163,7 @@ You approach the paperhangings corner. Samples of pre-made posters and wallpaper
 		<<link [['Buy (£' + _wallpaperCost / 50 + ')'|Furniture Shop Papers]]>>
 			<<set $money -= _wallpaperCost * 2>>
 			<<if _chosenWallpaperCustom is "" or _chosenWallpaperCustom is undefined>><<set _chosenWallpaperCustom to "custom design">><</if>>
-			<<set _normalisedName to Util.escape(_chosenWallpaperCustom)>>
-			<<run _normalisedName.replace("[","")>><<run _normalisedName.replace("]","")>><<run _normalisedName.replace("|","")>>
+			<<set _normalisedName to Util.escape(_chosenWallpaperCustom).replaceAll("[", "&#91;").replaceAll("]", "&#93;")>>
 			<<run Furniture.set('wallpaper', 'wallpaper', {
 				name	: _normalisedName,
 				nameCap	: _normalisedName.toUpperFirst()