Curious on how Studio Lite can "read" LocalScripts

[MaxthedaydreamerXMx (maxzieblox)]

I’ve noticed that Studio Lite allows you to read scripts such as RbxCharacterSounds or ClientActionEventLocal, which are normally default by Roblox and shouldn’t be readable. As far as I know; Roblox doesn’t allow you to read scripts, so I’m confused on how Studio Lite can do this. Any assistance would be nice

[FroDev1002 (FroDev)]

roblox has something called ScriptEditorService, which can access the code of a script. This only works for plugins, so what exactly is Studio lite?

[MaxthedaydreamerXMx (maxzieblox)]

It’s an experience, basically Roblox Studio in a roblox game

From what I assume, this is using the same logic as how exploits can scan LocalScripts.

[FroDev1002 (FroDev)]

maybe they have a custom system in place that allows you to see local scripts code, cause maybe they have it stored somewhere?

Other than that I wouldn’t know what it could be

[SomeFedoraGuy (octav)]

I’m more than sure they have a module with the scripts’ name and content making runtime-created ones show up. It’s not possible to get a script’s source in Client

[Dpelayo5907]

I’m pretty sure they store (Copy and paste) the entire script’s source in a string located somewhere hidden from the main game, and just grab that instead of trying to access the script directly

[MaxthedaydreamerXMx (maxzieblox)]

I don’t really think thats how it works; and besides it’s “read-only” which would be super unessecary for something you can’t edit

I believe this has something to do with how when copying a game using a hacked client, they can read client sided scripts but not serverscripts.

[Ziffixture (Ziffix)]

There’s no shady business going on here. It’s very much as everyone else surmises; the code is simply recorded and displayed

[AMisspelledUsernaem (bleh)]

The simplest solution is usually the right one, they more than likely just stored the source somewhere and when you request to read it they just display that. This is probably why the script is read only, because they can’t edit the source directly.

The reason this isn’t read during runtime is because there is simply no way to read scripts during runtime (for developers at least). Exploits can’t read the actual source, they get the bytecode and convert it back into luau which is why they usally end up with variable names such as local 1__a__1 = ...