Page MenuHomeFeedback Tracker

Zeus game masters are able to execute scripts in briefings.
New, WishlistPublic

Description

If one uses a briefing module and types <execute expression="">Example</execute> in the description, and inserts any kind of function/expression between the quotation marks, they'll find that a link is created in the description which can be used to execute whatever function/expression was inserted client-side.

Details

Legacy ID
1132127688
Severity
None
Resolution
Open
Reproducibility
Always
Category
Zeus - General
Steps To Reproduce
  1. Set a soldier as a Zeus game master.
  1. Create a briefing module and insert this as the description:

<execute expression="[4]call bis_fnc_earthquake">Earthquake</execute>

  1. Click the link created in the description, and notice that a client-side earthquake is caused.

Event Timeline

strelnikov set Category to Zeus - General.
strelnikov set Reproducibility to Always.
strelnikov set Severity to None.
strelnikov set Resolution to Open.
strelnikov set Legacy ID to 1132127688.May 8 2016, 11:50 AM