Correct. From the Lua 5.2 manual [0]: "all functions that load code are potentially insecure when loading untrusted binary data. [...] When in doubt, use the m

Correct. From the Lua 5.2 manual [0]: "all functions that load code are potentially insecure when loading untrusted binary data. [...] When in doubt, use the mode argument of those functions to restrict them to loading textual chunks." I thought this was widely known within the Lua community - I'm amazed that Factorio would support loading untrusted bytecode. Was that a decision the game's developers actively made (for what reasons?) or were they simply unaware of the risks? [0] https://www.lua.org/manual/5.2/manual.html#8.2 https://www.lua.org/manual/5.2/manual.html#8.2