4 ms·
> A better fix is to prevent rebinding the 'RunScript' function to some other name Breaking a huge number of addons in the process, for literally no benefit be
by eridius 10y ago
> A better fix is to prevent rebinding the 'RunScript' function to some other name
Breaking a huge number of addons in the process, for literally no benefit because the attacker can just use that other name.
> and to prevent rebinding the 'RemoveExtraSpaces' function by anything else
Which wouldn't really solve anything because the attacker can just find some other function that is regularly executed with attacker-supplied input and use that instead.
- tomc1985 10y agoNo, a better fix is to remove the ability to re-bind ALL functions, or at least system calls. How is function-hotswapping-bullshit permissible in an untrusted environment?