RootCauseunvalidated
`load` is still available. — Likewise, the `debug` library is still available as an attack vector too. Tension: many assumptions about Lua don't hold anymore; it can be abused to gain access to otherwise inaccessible variables. Outcome: or to trigger undefined behavior in the interpreter.
f66f1315-602c-4992-b9a9-e572af344aca
load is still available. — Likewise, the debug library is still available as an attack vector too. Tension: many assumptions about Lua don't hold anymore; it can be abused to gain access to otherwise inaccessible variables. Outcome: or to trigger undefined behavior in the interpreter.