scenevr / server

:heart_eyes: Create multiuser 3d environments using html-like tags and javascript
http://www.scenevr.com/
BSD 3-Clause "New" or "Revised" License
144 stars 19 forks source link

Prevent <script src="" /> from referencing files outside the scene directory #37

Closed bnolan closed 9 years ago

bnolan commented 9 years ago

Security fix.

bnolan commented 9 years ago

Fixed in scene-dom.

https://github.com/scenevr/dom/commit/96caecc3c10ced9f9b82c76c2c547d5fe2c8c1d3