Eventually every game developer learns the hard way that they must remove the bytecode ability from lua's loadstring() function. E.g. here's a 12 year old blog

Eventually every game developer learns the hard way that they must remove the bytecode ability from lua's loadstring() function. E.g. here's a 12 year old blogpost on the topic from the ROBLOX developers: https://archive.is/oXPyM https://archive.is/oXPyM To be honest, it would probably be better off disabled by default. Its legitimate uses are pretty niche.