Re:Hacking GTA V RP Servers Using Web Exploitation Techniques
by mtlynch on Wednesday August 30, 2023 @07:09AM
(#37320245)
Yeah, eval is the main culprit, but there's also Function, setTimeout, setInterval and friends.[0]
The other gotcha is that with a secure CSP policy, you can no longer do things like <button onclick="handleClick"> because that's inline JS, so that's kind of a bummer.
The other gotcha is that with a secure CSP policy, you can no longer do things like <button onclick="handleClick"> because that's inline JS, so that's kind of a bummer.
[0] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...