kibook / pmms

Synchronized media player for FiveM and RedM
136 stars 57 forks source link

Fix multiples exploits with pmms:start event #64

Open Ekinoxx0 opened 1 year ago

Ekinoxx0 commented 1 year ago

This PR move some checks before addToQueue function

Before, this would allow adding to queue links that are not authorized or without permission (even if checked on client, it's better to have this check properly on server-side)

This also block an exploit that would allow playing "file://" url, causing an instant crash to all client close to the player. (See this ResourceUIScripting.cpp#L39)