Closed marek22k closed 2 months ago
Consider this: A modder using github has shown some minimal commitment and is accessible to at least some peer review. Importing any zip opens up avenues for cr... unfathomable quality content or even malware shooting down our game. And people not always lay blame on obvious culprits (themselves in this case)...
If you have the know-how to protect yourself from unsavoury content, then you certainly have the ability to manually unpack a mod where it will be recognized? And don't tell me you can't due to being on mobile, in which case argument 1 applies tenfold.
:wink: technically this request might perhaps be rather easy [^1], and maybe others think that a swell idea, but that's my feeling.
[^1]: Coders: I think maybe only the Author is currently required to be fetched from the URL and not available within the normal repo ZIP, but we could always just insert "Untrustworthy Source" or something there?
I know by where I would have to pack the mod data, but unfortunately I due to A13 but no authorization for it. The only thing I could do would be to use adb (with root).
Regarding the other argument: Maybe it would be possible to "hide" the option somewhere - like in Android the Developer Settings. Furthermore, I don't see how you could "hack" the game with JSON files only. The only possible thing would be to crash the game. Apart from that, malicious individuals could also publish harmful mods on GitHub.
I'm marking this as "won't fix" since it's a deprioritized issue. If within the next year no one starts working on this I'll close the issue
FWIW, I've tried it - just to have it easier debugging another issue - and shelved it as "too unclean/fragile".
So, even after coding a working POC I really still think it's best to keep it Repo only for now.
We get Author and mod name from the repo so that would need replacements
Author Name could be taken from the ModOptions.json? And if this is invalid, you could reject the mod.
We trust a zip to contain a subfolder named same as the repo
This could also be checked and if it is not the case, it could be rejected as invalid.
The mod I tested with was badly bugged - came with a modOptions.json that was not loadable - and getting any sanity checks / exception messages back into the UI would need some more kludges
Couldn't you display a message like it is currently for non-GitHub URLs?
Yes (or ask), yes and yes and the resulting card house (which I included) is too ugly and too hard to get right / maintain
Since this is a mobile related question only, is it possible to establish a folder at
Another advantage of having an option to download mods from non-GitHub sources (regardless of whether ZIP or from Codeberg) is that IPv6-only devices can also download mods. Unfortunately, GitHub is IPv4-only. So for people who want to download mods on IPv6-only networks, this is currently impossible. (I thought an extra issue titled "Failed to download mods on IPv6-only device" was a duplicate. Hence my post here)
The problem with the demo I did six weeks a go is basically metadata. An active issue about maps-in-nods is precisely about metadata too. If we get that defined, a workable decision about a data schema, then a "wild" zip will only need to be checked that enough metadata is in ModOptions, and be rejected - E.g. should we declare Author to be mandatory and it's not there.. Much easier.
This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 15 days.
Please do not clone. @github-actions
Ngl, when I passed by this issue a while ago I somewhat wasn't paying attention and though it was more about accessing a mod outside of the Android/data folder in general. The idea of accepting any zip seems like it could be a pain all on its own, though
As patch
Idk if OP would be open to this suggestion, but what of there was a way to just import zips? Not zip urls. Just zips that were already downloaded. Because that seems like something that could be much safer and easier for validation checking
This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 15 days.
This issue was closed because it has been stalled for 5 days with no activity.
Bump
Hello,
I would like to import a mod into UnCiv which is not on GitHub. When I enter the URL, "Invalid URL" appears. I can't copy any data to the Android/data directory (I guess because of Android 13). How can I download a mod and import it to UnCiv without it being on GutHub?
Is it possible to import a ZIP file?
(This feature request differs from #9123 in that I want to manually import the mod here.)