From 86c083837bbc3825fa63fbe5cfe3fe0c451193cb Mon Sep 17 00:00:00 2001 From: Mark Vejvoda Date: Fri, 12 Oct 2012 14:10:19 +0000 Subject: [PATCH] - add lua's io package to unsafe list --- source/shared_lib/sources/lua/lua_script.cpp | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/source/shared_lib/sources/lua/lua_script.cpp b/source/shared_lib/sources/lua/lua_script.cpp index ab5e44a29..8d2747337 100644 --- a/source/shared_lib/sources/lua/lua_script.cpp +++ b/source/shared_lib/sources/lua/lua_script.cpp @@ -75,6 +75,18 @@ LuaScript::LuaScript() { lua_pushnil(luaState); lua_setfield(luaState, -2, "exit"); + lua_getglobal(luaState, "io"); + lua_pushnil(luaState); + lua_setfield(luaState, -2, "open"); + lua_pushnil(luaState); + lua_setfield(luaState, -2, "close"); + lua_pushnil(luaState); + lua_setfield(luaState, -2, "write"); + lua_pushnil(luaState); + lua_setfield(luaState, -2, "read"); + lua_pushnil(luaState); + lua_setfield(luaState, -2, "flush"); + lua_pushnil(luaState); lua_setglobal(luaState, "loadfile"); lua_pushnil(luaState);