[DiscordArchive] you don't remember the addons they had to add a warning for in game because they were enabling scrip
[DiscordArchive] you don't remember the addons they had to add a warning for in game because they were enabling scrip
Archived author: Troof • Posted: 2023-12-05T18:52:49.782000+00:00
Original source
you don't remember the addons they had to add a warning for in game because they were enabling scripts without consent?
Archived author: Srzm • Posted: 2023-12-05T18:54:43.603000+00:00
Original source
Okay, addons with malicious behaviour. I see.
Archived author: Troof • Posted: 2023-12-05T18:55:14.953000+00:00
Original source
yeah now they have a whole framework for blocking scripts from addons unless you explicitly consent
Archived author: M'Dic • Posted: 2023-12-05T18:55:29.302000+00:00
Original source
Lua unlockers as a example that gave users acvess to private lua functions such as casting spells regardless of requirements
Archived author: Tea • Posted: 2023-12-05T18:55:29.551000+00:00
Original source
you mean weakauras that mail away all your gold
Archived author: Troof • Posted: 2023-12-05T18:55:36.243000+00:00
Original source
yeah that
Archived author: M'Dic • Posted: 2023-12-05T18:55:58.154000+00:00
Original source
Oh wow. That actually happened? Always heard stories.
Archived author: Tea • Posted: 2023-12-05T18:56:36.842000+00:00
Original source
yep, thats why blizz added confirmation dialogs whenever you mail gold to a character not "trusted" (alt/guild/friendlist)
Archived author: Srzm • Posted: 2023-12-05T18:57:50.441000+00:00
Original source
An addon alone can unlock lua functions? I thought such stuff would require a modified WoW.exe and stuff like that.
Archived author: M'Dic • Posted: 2023-12-05T18:58:02.963000+00:00
Original source
Ah. I see the pr merge that "fixed' the exploit
<https://github.com/WeakAuras/WeakAuras2/pull/2852>