mesecons/mesecons
Jeija 703e6fdadb Luacontroller: Restrict digiline messages
Restrict maximum length of messages to 50.000 characters and disable sending functions or table references over the wire. Restrict types of channel variable to string, number or boolean.

The missing length restriction made DoS-like attacks possible by overflowing memory using string concatenation. Thanks to gamemanj for disclosing this issue.
2016-12-28 10:07:59 +01:00
..
textures Move shared textures into base mod (fixes a few LuaC issues) 2016-08-23 11:02:12 +02:00
actionqueue.lua Further simplification of turnon/turnoff 2016-08-30 18:24:08 +02:00
depends.txt Upload after major code reorganization - Version 0.6 DEV - Split mesecons mod into several modules - [BUGGY?] 2012-03-05 19:21:26 +01:00
init.lua Never postpone action_on or action_off 2016-09-04 09:50:30 +02:00
internal.lua Small cleanups in `internal.lua`, move forceloading reversal to legacy 2016-08-30 19:37:43 +02:00
legacy.lua Duplicate unhash_blockpos code to legacy.lua 2016-08-31 08:46:11 +02:00
oldwires.lua Don't refer to LIGHT_MAX global; use default. 2015-05-11 11:28:56 +07:00
presets.lua Remove trailing whitespace 2015-10-04 13:30:34 +02:00
services.lua Split wires into their own mod, introduce autoconnect hooks 2016-08-23 11:08:53 +02:00
settings.lua Consistently use UNIX line endings (LF instead of CR LF) 2016-02-15 23:05:21 +01:00
util.lua Luacontroller: Restrict digiline messages 2016-12-28 10:07:59 +01:00