Security Patch [Relevant for Modders]
Hey guys,
We're doing a quick security patch today that also affects the Scripting API.
We still want mods to be able to communicate with external tools, of course. In order to make up for the lost functionality, we'll be adding a socket library in the near future.
We're doing a quick security patch today that also affects the Scripting API.
Scripting API
"We're adjusting the Server API privileges to the Client API privileges."
- Server Scripting API: Removed os.execute() and similar functionality
- Server Scripting API: Removed all functionality for loading/executing binary files
- Server Scripting API: Removed functionality to write-access any file on the system
- Write access only allowed for %AppData%\Avorion\moddata\ and galaxy folder
- Read access only allowed for %AppData%\Avorion\, installation folder, galaxy folder and folders of enabled mods
- On unix-based systems, replace %AppData% with ~/.avorion
- Write access only allowed for %AppData%\Avorion\moddata\ and galaxy folder
We still want mods to be able to communicate with external tools, of course. In order to make up for the lost functionality, we'll be adding a socket library in the near future.