oss/luanti
oss/luanti
1
0
Fork 0
mirror of https://github.com/luanti-org/luanti.git synced 2025-09-30 19:22:14 +00:00
Code Wiki Activity

os.date and string.dump potentially unsafe

Browse source
This commit is contained in:
Desour 2025-03-24 13:21:13 +01:00
parent cdfb08ed0f
commit 05456059f1
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/script/cpp_api/s_security.cpp
View file

@ -408,13 +408,13 @@ void ScriptApiSecurity::initializeSecuritySSCSM()
"xpcall",
// Completely safe libraries
"coroutine",
"string",
"string", //TODO: string.dump?
"table",
"math",
"bit",
};
static const char *os_whitelist[] = {
"date",
"date", // TODO: can crash? (<http://lua-users.org/wiki/SandBoxes>)
"difftime",
"time"
};