Re:World of Warcraft: one simple line of code can cost you d...
by developer2 on Tuesday July 26, 2016 @02:28AM
(#12163712)
This completely misses the point. Incoming chat messages from other players should simply be incapable of reaching a context in which it is interpreted as script. Inbound text chat should be treated as such - text. If the player types in commands that directly have an effect, that is their problem. If a single command provides remote code execution of anything another player types in their chat... that is simply ridiculous.
[ Parent
| on HN ]
Re:World of Warcraft: one simple line of code can cost you d...
by erezyehuda on Tuesday July 26, 2016 @02:07PM
(#12167596)
The very existence of RunScript combined with the ability to rebind functions makes this impossible, I think. Unfortunately, I'd guess that, at this point, those features are too tangled into the game to be easily cut out.