Unbind unsafe APIs (load/loadstring) in bbslua.

wuweichi · Jun 20, 2016 · bd1a664 · bd1a664
1 parent 524cced
commit bd1a664
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/mbbsd/bbslua.c b/mbbsd/bbslua.c
@@ -977,7 +977,9 @@ bbsluaRegConst(lua_State *L)
 
     // unbind unsafe API
     lua_pushnil(L); lua_setglobal(L, "dofile");
+    lua_pushnil(L); lua_setglobal(L, "load");
     lua_pushnil(L); lua_setglobal(L, "loadfile");
+    lua_pushnil(L); lua_setglobal(L, "loadstring");
 
     // global
     lua_pushcfunction(L, bl_print);