Enable mod security by default

diff --git a/builtin/settingtypes.txt b/builtin/settingtypes.txt
index 0a6c21a46912891c2ee86ece12532983be876fd3..9b5f386e0b10baabb583fb104b9540f550165f4e 100644 (file)
--- a/builtin/settingtypes.txt
+++ b/builtin/settingtypes.txt
@@ -1161,7 +1161,7 @@ mgvalleys_np_inter_valley_slope (Valley Slope) noise_params 0.5, 0.5, (128, 128,
 [*Security]
 
 #    Prevent mods from doing insecure things like running shell commands.
-secure.enable_security (Enable mod security) bool false
+secure.enable_security (Enable mod security) bool true
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/minetest.conf.example b/minetest.conf.example
index 465e1d0696c9b324dedcde484f7c746bdbf79452..e24d3a384d89080dd67e320e4a2d933b84e32f91 100644 (file)
--- a/minetest.conf.example
+++ b/minetest.conf.example
@@ -1507,7 +1507,7 @@
 
 #    Prevent mods from doing insecure things like running shell commands.
 #    type: bool
-# secure.enable_security = false
+# secure.enable_security = true
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/src/defaultsettings.cpp b/src/defaultsettings.cpp
index 00c233a426d9c8d21f01b2729a23914566480346..522aa848107fae0bf5c568753e2e2eaa805919b0 100644 (file)
--- a/src/defaultsettings.cpp
+++ b/src/defaultsettings.cpp
@@ -301,7 +301,7 @@ void set_default_settings(Settings *settings)
        settings->setDefault("emergequeue_limit_diskonly", "32");
        settings->setDefault("emergequeue_limit_generate", "32");
        settings->setDefault("num_emerge_threads", "1");
-       settings->setDefault("secure.enable_security", "false");
+       settings->setDefault("secure.enable_security", "true");
        settings->setDefault("secure.trusted_mods", "");
        settings->setDefault("secure.http_mods", "");