2020.12.1.27 - Security bugfixes, Haptic system tweaks and fixes
A smaller, but important patch. Fixing some security exploits in the permission system. It's a pretty general fix, which should fix cases where some changes were not validated that were supposed to be, so this should harden the system a fair bit.
Also some tweaks and bugfixes for the Haptic Feedback system!
[h2]Tweaks:[/h2]
- HapticVolumes injected to other avatars are now setup with radial distance filter, so they will get gradually stronger as they get closer to the haptic point
-- The radius ratios (relative to the collider size) and power are tweakable on HapticManager for experimentation. Note that you need to rebuild all injected colliders after change
- Added extra logging information for permission system to help diagnose future problems
- Added blueberry
-- Note that blueberries grow under very different conditions from oranges
-- In extremely rare conditions, both can ripen at exactly the same time of the year
- Tweaked the default intensities of HapticVolumes injected to other avatars to compensate for the radial distance and certain interactions being too weak
- Merged German locale additions by @Ardes
- Merged Spanish locale additions by @Ruzert
[h2]Bugfixes:[/h2]
- Fixed Permission system not running validations in some cases, particularly when objects was marked for validation, but no validations were setup yet
-- This fixes exploit that allowed modified clients to kick/ban users from the session without having the permission to do so (reported by @H3BO3, @3x1t_5tyl3, @Komdog, Wolfie#1199 and @ItsDusty)
-- Also as a note, please avoid renaming the default session roles unless absolutely necessary. This has caused unecessary delays with diagnosis of this problem problem
- Addiitional security improvements for hijacking user's hand
- Fixed HapticPointSampler debug visual not being properly destroyed when disabled
- Fixed Tween not completing if it's disabled mid-transition (this fixes tiny badges reported by @Shifty | Quality Control Lead, @Tatsu Kimiero, @Ryuvi | Technical Artist and others)
- Fixed haptics breaking when an invalid Sensation class is used (reported by @jeana)
- Fixed haptic feedback not stopping when the HapticVolume collider is deleted while the user is intersecting with it (reported by @jeana)
- Fixed haptic feedback momentarily spiking to 100 % intensity when the HapticVolume is deleted
- Fixed invalid MinScale assignment when equipping an avatar producing a warning in the logs (reported by @Enverex)
Also some tweaks and bugfixes for the Haptic Feedback system!
[h2]Tweaks:[/h2]
- HapticVolumes injected to other avatars are now setup with radial distance filter, so they will get gradually stronger as they get closer to the haptic point
-- The radius ratios (relative to the collider size) and power are tweakable on HapticManager for experimentation. Note that you need to rebuild all injected colliders after change
- Added extra logging information for permission system to help diagnose future problems
- Added blueberry
-- Note that blueberries grow under very different conditions from oranges
-- In extremely rare conditions, both can ripen at exactly the same time of the year
- Tweaked the default intensities of HapticVolumes injected to other avatars to compensate for the radial distance and certain interactions being too weak
- Merged German locale additions by @Ardes
- Merged Spanish locale additions by @Ruzert
[h2]Bugfixes:[/h2]
- Fixed Permission system not running validations in some cases, particularly when objects was marked for validation, but no validations were setup yet
-- This fixes exploit that allowed modified clients to kick/ban users from the session without having the permission to do so (reported by @H3BO3, @3x1t_5tyl3, @Komdog, Wolfie#1199 and @ItsDusty)
-- Also as a note, please avoid renaming the default session roles unless absolutely necessary. This has caused unecessary delays with diagnosis of this problem problem
- Addiitional security improvements for hijacking user's hand
- Fixed HapticPointSampler debug visual not being properly destroyed when disabled
- Fixed Tween not completing if it's disabled mid-transition (this fixes tiny badges reported by @Shifty | Quality Control Lead, @Tatsu Kimiero, @Ryuvi | Technical Artist and others)
- Fixed haptics breaking when an invalid Sensation class is used (reported by @jeana)
- Fixed haptic feedback not stopping when the HapticVolume collider is deleted while the user is intersecting with it (reported by @jeana)
- Fixed haptic feedback momentarily spiking to 100 % intensity when the HapticVolume is deleted
- Fixed invalid MinScale assignment when equipping an avatar producing a warning in the logs (reported by @Enverex)