liangsheng8708
/
ruffle
mirror of https://mirror.ghproxy.com/https://github.com/ruffle-rs/ruffle.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

chore: Fix subject-verb agreement

This commit is contained in:
Daniel Jacobs 2024-06-07 12:53:16 -04:00
parent b81e5e6217
commit 69a2a026ae
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/packages/core/src/ruffle-imports.ts
View File

@ -70,7 +70,7 @@ export function copyToAudioBufferInterleaved(
export function callExternalInterface(name: string, args: any[]): any {
// [NA] Yes, this is direct eval. Yes, this is a Bad Thing when it comes to security.
// In fact, yes this is vulnerable to an XSS attack!
// But plot twist: Flash allowed for this and many games *relies on it*. :(
// But plot twist: Flash allowed for this and many games *rely on it*. :(
// Flash content can do `call("eval", "....")` regardless, this doesn't enable anything that wasn't already permitted.
// It just goes against what the documentation says, and *looks* really suspicious.
// Content can only run this if the website has enabled `allowScriptAccess`, so it has to be enabled by the website too.