Allow Script Source Changes by Server Scripts

Currently, setting a LocalScript's Source property is impossible during runtime, even from a server script. I cannot find official documentation on the reason for this but I assume it is for security, to prevent malicious code from injecting itself into trusted source files. I am experimenting with server security features and I want to be able to slightly modify each client source on the server before distributing them to the clients in order to introduce dynamic per-client-source obfuscation and security features. With the addition of LoadstringEnabled, it is already possible to execute arbitrary new code from server scripts, so I am not sure of what additional reasons there are for forcing the Source protection.

13 Likes