Introducing Plugin HTTP Permissions

Updates Announcements
#64

Does this mean teleporting will finally be handled on the server, alongside teleport data? :smile:

4 Likes
#65

I don’t think that’s what they’re referring to. I think they mean preventing the situation of backdoor scripts that can teleport all players out of an affected game into a target game of choice on command of the person who made the backdoor.

4 Likes
#66

At least I know witch of the plugins are attempting to access online, so now I cannot worry about that plugin that all it’s supposed to do is create a sandwich but that in reality, it’s trying it’s very stapling best to access my player’s data!

2 Likes
#67

My plugin Reclass does manage to successfully listen for the property change, so that’s interesting.

-- this prints hello if you change your game's HttpEnabled setting
HttpService:GetPropertyChangedSignal "HttpEnabled":Connect(function()
    print "Hello!"
end)

Anyway, thanks! I’ll definitely push an update to my plugin to remove it’s dependency on HttpService in light of the announcement.

#68

What happens if the plugin just creates a script that sends a HTTP request ? boom IP grabbed, This doesn’t fix the bigger issue. Good update tho.

1 Like
#69

I think it would be nice to extend this to all scripts in a game… I had a free model of a tree once, making suspicious HTTP requests… My game was at a very early point, so it could have very well been sending all my assets to this website… I didn’t notice its work in the background until I started getting error messages when I had 1000+ trees spawned … apparently the rogue script had hit a threshold for HTTP requests…

From that experience, I now have scripts that check for rogue scripts throughout my game, at all times - in models, scriptservice, etc…

I DO like this idea for plugins though.

-Jason

3 Likes
#71

You don’t need to grant permissions. You’ll be promoted when a plugin is trying to connect to a new server. Only if you deny, will you need to use plugin settings to remove the denial.

AFAIK, local plugins are not subject to this.

#72

Yes thank you. This is a long waited feature. There were tons of problems with iplogger plugins and this fixed the issue totally! Great update! :wink:

#73

This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.