wiremod / wire-extras

Community Contributed Wire Extras Repository (formerly UWSVN). These are addons which may be of use to wiremodders but do not undergo the same level of critique that the official repos do.
Apache License 2.0
83 stars 66 forks source link

Preparing for workshopification #88

Closed Anticept closed 4 years ago

Anticept commented 4 years ago

This PR code needs a careful audit as it had a hardcoded kick in it and was removed. There's potentially useful code in this though. We're readying it for putting on workshop.

Yes, I know, potential license conflict, but being that this isn't for profit anyways, the fallout from a license conflict is effectively nil.

This is not to be merged without a careful examination!

TODO:

thegrb93 commented 4 years ago

You mean a backdoored workshop addon was found and removed. They way you say it here sounds like the repo had the backdoor.

marchcain commented 4 years ago

Just checked autorun/server/servermessage.lua, where the backdoor was found, and it's not there. Creed just put it in his workshop addon.

marchcain commented 4 years ago

^ although there could be other backdoors laying around, I was just saying Creeds backdoor probably isn't here

Anticept commented 4 years ago

You mean a backdoored workshop addon was found and removed. They way you say it here sounds like the repo had the backdoor.

Correct, this addon had a backdoor. More or less just kicked someone with a particular steam ID so not even sure if it's valid to call it a backdoor. Edited.

thegrb93 commented 4 years ago

What hardcoded kick are you talking about?

Anticept commented 4 years ago

https://github.com/wiremod/wire-extras/pull/88/commits/9d5d37ae2b6abdedd4fa7de6fcb0eaf102209733#diff-42dee2b7a9f7b151ffd2feddc526d1ddL13

thegrb93 commented 4 years ago

Oh so this is code from that workshop release except without that part.

Divran commented 4 years ago

List of things that need to be fixed in this PR

I might have missed some things. I have not tested it ingame, just skimmed through the code here on github. TLDR: there's more things that need to be removed from this PR than things we can keep

Anticept commented 4 years ago

We'll make our own then.