Follow

I wonder if UdonScript gets a network/execution sandbox, or if people can use it to automatically launch webpages when someone enters a space or whatever.

· · Web · 1 · 0 · 1

Or, y'know, launching arbitrary binaries with arbitrary command line arguments

Given that UdonScript theoretically has complete access to the Unity runtime, this might be a problem.

@fluffy I haven't fully dove down in it but from what I can see, they have a very limited set of properties and objects you're allowed to change in udonscript

so I don't think it actually has full access to the Unity runtime by design

@fluffy so I don't think a sand box but instead a limited white list of functionality

@chimerror the node-based visual language is very restricted but under the hood it's running a bytecode that has complete access to the Unity CLR bindings

I'll have to experiment with something

@fluffy for sure, like I've only played with it a little bit few months ago, and I was using UdonSharp, which lets you not use the nodes and write in C#

So that might be an even easier way to inject in there!

@chimerror yeah I mean it's UdonSharp I was specifically going to use

Sign in to participate in the conversation
✨Plush✨City 🏙

This is a space for soft friends and friends of soft friends to gather together!

In this city we're all about soft friends and compassion and caring about each other!

Code of Conduct in a Nutshell

Discrimination & Bigotry Won’t Be Tolerated.

Hatred will find no home here.

Treat this Space and Those Within it with Respect.

Listen actively to and honor the requests of others; always respond with compassion first.

Consent is Important in all contexts.

If you’re ever unsure, ask first. Use CWs where required.

Listen; Don’t Make Excuses.

If you’re accused of causing harm, either take some responsibility or ask moderators for help.

Don’t Break the Law Here.

The whole space may be liable if you do.

Use the Report Feature.

All reports go straight to our moderation team. We’re here to help!

For more detail, please
Review our
Full Code of Conduct