Require request_insecure_environment to be called from the mod's main scope
authorShadowNinja <shadowninja@minetest.net>
Thu, 18 Feb 2016 21:06:07 +0000 (16:06 -0500)
committerparamat <mat.gregory@virginmedia.com>
Fri, 19 Feb 2016 14:52:10 +0000 (14:52 +0000)
commit4827ee1258ac9d68808ca4e2a9cb88bf49473e6b
treee2900cf20cb7aed59fb69e94b97784e02843e0cd
parent997be666e37e9494bb92a50521b4b749156a609c
Require request_insecure_environment to be called from the mod's main scope

Previously you could steal a secure environment from a trusted mod by wrapping
request_insecure_environment with some code like this:

local rie_cp = minetest.request_insecure_environment
local stolen_ie
function minetest.request_insecure_environment()
local ie = rie_cp()
stolen_ie = stolen_ie or ie
return ie
end
doc/lua_api.txt
src/script/lua_api/l_util.cpp