News for hackers. Stuff that matters.
Re:Open 3D Foundation announces first major release of Open ... by onion2k on Friday December 03, 2021 @04:15AM (#29428120)
Are these failures due to the game engine?

In the case of users being able to insert HTML+JS in to the in-game chat to kick other players, yes. The game engine should be authenticating the source of API calls.

Re:Open 3D Foundation announces first major release of Open ... by gmueckl on Friday December 03, 2021 @06:34AM (#29428867)
In that case it's more a question of why that heck a chat UI inside a game cares about HTML and JS in the first place. Someone clearly overdesigned something here.
Re:Open 3D Foundation announces first major release of Open ... by flohofwoe on Friday December 03, 2021 @09:01AM (#29430093)
There was probably a "chat needs to support emojis" in the requirements list and things escalated from there until the "easiest" solution was a webview widget.