From 2e486d987bf7af1b46acffa030bd6ea54c8d510d Mon Sep 17 00:00:00 2001 From: EliteMasterEric Date: Sun, 1 Jun 2025 18:05:24 -0400 Subject: [PATCH] Add "hscript" to the HScript blacklist --- source/funkin/modding/PolymodHandler.hx | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/source/funkin/modding/PolymodHandler.hx b/source/funkin/modding/PolymodHandler.hx index d87afbda9..d7e328d31 100644 --- a/source/funkin/modding/PolymodHandler.hx +++ b/source/funkin/modding/PolymodHandler.hx @@ -347,6 +347,15 @@ class PolymodHandler Polymod.blacklistImport(className); } + // `hscript.* + // Contains functions which may allow for interpreting unsanitized strings. + for (cls in ClassMacro.listClassesInPackage('hscript')) + { + if (cls == null) continue; + var className:String = Type.getClassName(cls); + Polymod.blacklistImport(className); + } + // `funkin.api.newgrounds.*` // Contains functions which allow for cheating medals and leaderboards. for (cls in ClassMacro.listClassesInPackage('funkin.api.newgrounds'))