Create Task
Maniphest T1864

[Suggestion] Restrict access to /function, /timer and /load commands
Open, HighPublic
Actions

Description

Some commands can be used in harmful ways.
An example of that would be a spam machine:

/timer 1 {/forget /this;/function /this blarg {/whisper "Names" Hello, I spam you;/timer 100 /this};/this}
by saving this as a file, one could /load the script and spam multiple people.

Maze added a subscriber: Maze.May 6 2018, 2:09 PM

If you convince someone to run
/timer 0 {/function / / /;/}
it'll crash their game (infinite recursion)

On a separate note, spamming is just as easy with external tools (autohotkey/xdotool) as it is with in-game scripting. I don't think you can prevent spam this easily.

Rattletrap raised the priority of this task from Needs Triage to High.Fri, Mar 15, 6:28 AM