search

Fernando-A-Rocha / mta-add-models

Library for Multi Theft Auto: San Andreas that lets you add new models to your server
GNU General Public License v3.0
66 stars 16 forks source link

Script security issue #49

Closed thisdp closed 3 months ago

thisdp commented 3 months ago

At 678691c File newmodels_reborn/scripts/core/shared_importfunc.lua, line 13: exportScriptString = fileRead(f, fileGetSize(f)) This can cause lua injection, when other resources "loadstring" the "import()" result. Use fileGetContents instead

Fernando-A-Rocha commented 3 months ago

thank u, u are right! fileGetContents will verify the checksum of the script