mirrors/Mindustry
1
0
Fork 0
mirror of https://github.com/Anuken/Mindustry.git synced 2025-02-21 20:18:06 +07:00
Code Issues Packages Projects Releases Wiki Activity

"""security"""

Browse Source
This commit is contained in:
Anuken 2019-11-27 00:07:37 -05:00
parent d9aa9b6278
commit eabbd2fa32
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
core/src/io/anuke/mindustry/mod/Scripts.java
View File

@ -1,10 +1,12 @@
package io.anuke.mindustry.mod; package io.anuke.mindustry.mod;
import io.anuke.arc.files.*;
import org.graalvm.polyglot.*; import org.graalvm.polyglot.*;
public class Scripts{ public class Scripts{
//TODO allowHostAccess(...) is obviously insecure //TODO allowHostAccess(...) is obviously insecure
private Context context = Context.newBuilder("js").allowHostClassLookup(s -> s.startsWith("io.anuke.mindustry")).allowHostAccess(HostAccess.ALL).build(); private Context context = Context.newBuilder("js").allowHostClassLookup(s -> s.startsWith("io.anuke.mindustry"))
.allowHostAccess(HostAccess.newBuilder().allowPublicAccess(true).denyAccess(FileHandle.class).build()).build();
public Scripts(){ public Scripts(){
context.eval("js", "console.log(\"Initialized JS context.\")"); context.eval("js", "console.log(\"Initialized JS context.\")");