From 4bb41a19dc74fa31cb021dc3b5622814d67fbd6f Mon Sep 17 00:00:00 2001 From: red-001 Date: Sun, 18 Feb 2018 21:33:42 +0000 Subject: Mitigate formspec exploits by verifying that the formspec was shown to the user by the server. (#6878) This doesn't check the fields in anyway whatsoever so it should only be seen as a way to mitigate exploits, a last line of defense to make it harder to exploit bugs in mods, not as a reason to not do all the usually checks. --- src/server.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/server.h') diff --git a/src/server.h b/src/server.h index b5db04c8a..13c21067c 100644 --- a/src/server.h +++ b/src/server.h @@ -591,6 +591,8 @@ private: */ std::queue m_peer_change_queue; + std::unordered_map m_formspec_state_data; + /* Random stuff */ -- cgit v1.2.3