oss/luanti
oss/luanti
1
0
Fork 0
mirror of https://github.com/luanti-org/luanti.git synced 2025-09-30 19:22:14 +00:00
Code Wiki Activity

os.date and string.dump potentially unsafe

Browse source
This commit is contained in:
Desour 2025-03-24 13:21:13 +01:00
parent cdfb08ed0f
commit 05456059f1
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/script/cpp_api/s_security.cpp
View file

@ -408,13 +408,13 @@ void ScriptApiSecurity::initializeSecuritySSCSM()
"xpcall", "xpcall",
// Completely safe libraries // Completely safe libraries
"coroutine", "coroutine",
"string", "string", //TODO: string.dump?
"table", "table",
"math", "math",
"bit", "bit",
}; };
static const char *os_whitelist[] = { static const char *os_whitelist[] = {
"date", "date", // TODO: can crash? (<http://lua-users.org/wiki/SandBoxes>)
"difftime", "difftime",
"time" "time"
}; };