4 ms·
Are these failures due to the game engine? In the case of users being able to insert HTML+JS in to the in-game chat to kick other players, yes. The game engine
by onion2k 5y ago
Are these failures due to the game engine?
In the case of users being able to insert HTML+JS in to the in-game chat to kick other players, yes. The game engine should be authenticating the source of API calls.
- gmueckl 5y agoIn that case it's more a question of why that heck a chat UI inside a game cares about HTML and JS in the first place. Someone clearly overdesigned something here.
- flohofwoe 5y agoThere was probably a "chat needs to support emojis" in the requirements list and things escalated from there until the "easiest" solution was a webview widget.