-
Notifications
You must be signed in to change notification settings - Fork 248
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding New Level: Lua Metatable hooks #128
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@TheDarkThief Thanks for your work! I left comments to improve it and accept it, good job man!
Season-3/Level-1/code.lua
Outdated
|
||
|
||
--- Generates a bitmap image | ||
-- @param request: The table which we will populate with images |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I understand what you try to say but please rewrite it in a more explanatory way, such as for example that the table will contain pixels for the image that will be populated and it's being represented as a table.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Went into a bit more depth in the comment
I've made the requested changes, as well as switch to the Busted library making it easier to setup Github CI as well as make the error messages a bit clearer |
Summary
Adding a new level demonstrating Lua metatables, and how a malicious actor can hook into them
Changes
Created a level where a user requests the client to populate a table, where a malicious actor gains remote code execution due to improper sanitation.
Task list