Hey guys,
We're doing a quick security patch today that also affects the Scripting API.
Scripting API
"We're adjusting the Server API privileges to the Client API privileges."
- Server Scripting API: Removed os.execute() and similar functionality
- Server Scripting API: Removed all functionality for loading/executing binary files
- Server Scripting API: Removed functionality to write-access any file on the system
- Write access only allowed for %AppData%\Avorion\moddata\ and galaxy folder
- Read access only allowed for %AppData%\Avorion\, installation folder, galaxy folder and folders of enabled mods
- On unix-based systems, replace %AppData% with ~/.avorion
We still want mods to be able to communicate with external tools, of course. In order to make up for the lost functionality, we'll be adding a socket library in the near future.