Re:Open 3D Foundation announces first major release of Open ...
by gmueckl on Friday December 03, 2021 @06:34AM
(#29428867)
In that case it's more a question of why that heck a chat UI inside a game cares about HTML and JS in the first place. Someone clearly overdesigned something here.
In the case of users being able to insert HTML+JS in to the in-game chat to kick other players, yes. The game engine should be authenticating the source of API calls.