From: nhkeni <keni@his.com>
Date: Sat, 4 Feb 2023 14:50:49 +0000 (-0500)
Subject: leave a note on a potential future Lua sandbox issue
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=31d5fecbb236abcab782e75785ccd1387e0f16bd;p=nethack

leave a note on a potential future Lua sandbox issue
---

diff --git a/src/nhlua.c b/src/nhlua.c
index 20fd28919..0c192ac38 100644
--- a/src/nhlua.c
+++ b/src/nhlua.c
@@ -2018,6 +2018,8 @@ static struct e ct_base_iffy[] = {
 };
 
 /* NHL_BASE_UNSAFE - include only if required */
+/* TODO: if NHL_BASE_UNSAFE is ever used, we need to wrap lua_load with
+ * something to forbid mode=="b" */
 static struct e ct_base_unsafe[] = {
     {IFFLAG, "dofile"},
     {IFFLAG, "loadfile"},