Remove debug.getupvalue from the Lua sandbox whitelist
authorShadowNinja <shadowninja@minetest.net>
Thu, 3 Mar 2016 04:59:42 +0000 (23:59 -0500)
committerShadowNinja <shadowninja@minetest.net>
Thu, 3 Mar 2016 05:09:05 +0000 (00:09 -0500)
commitabd4a79acbdfcea0bb661b8065ef3ac8f3e25e80
tree440d59b0d33e55a2f9d4d40bd6554e8249f7df63
parent8b006a154b31a2fd0fb58e77db25debef4bb61e0
Remove debug.getupvalue from the Lua sandbox whitelist

This function could be used to steal insecure environments from trusted mods.
src/script/cpp_api/s_security.cpp