that is exactly what is looks like: it has a HTML injection vuln in the UI. yes, the same UI that can read/write to your host from JS lol
UAhh I'm gonna be sick ! OH
You must log in to comment.
in reply to @lexi's post:
why would you put a web technology inside a video game in the first place oh my god
There are many good reasons:
- Flash is dead, and so is Scaleform
- All UI frameworks suck, but especially the in-house ones
- Using HTML 5 means you can teach webdev script kiddies to make games (ez) instead of forcing C++ programmers to do scripting that they feel is beneath them
npm install react
Valve.. they really need to pull their heads out of their rectums, because this is getting scary now.
I'm not entirely sure what I'm looking at here, what's going on in the votekick box?
can you actually run scripts from this context? i would've assumed they'd've locked down the super duper bad stuff at least