From 31d5fecbb236abcab782e75785ccd1387e0f16bd Mon Sep 17 00:00:00 2001 From: nhkeni Date: Sat, 4 Feb 2023 09:50:49 -0500 Subject: [PATCH] leave a note on a potential future Lua sandbox issue --- src/nhlua.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/nhlua.c b/src/nhlua.c index 20fd28919..0c192ac38 100644 --- a/src/nhlua.c +++ b/src/nhlua.c @@ -2018,6 +2018,8 @@ static struct e ct_base_iffy[] = { }; /* NHL_BASE_UNSAFE - include only if required */ +/* TODO: if NHL_BASE_UNSAFE is ever used, we need to wrap lua_load with + * something to forbid mode=="b" */ static struct e ct_base_unsafe[] = { {IFFLAG, "dofile"}, {IFFLAG, "loadfile"}, -- 2.50.1