I'm currently developing a game with a team of other developers assisting me, and I'd really like to load the Master script remotely from a web server. GET'ing the code is simple and is done quickly, but, the thing is actually parsing the code.
I've tried to use einsteinK/Stravant's Lua parsing library, but the script is too long and takes too long to parse.
I've then tried to use ROBLOX's loadstring
function, and it works just fine, so I'd like to use it.
However, this has major security issues as loadstring
can be easily used by exploiters if LoadStringEnabled is true. I DO have Filtering enabled, though, so I guess that'll stop some exploiters.
How safe is it to have LoadString enabled with Filtering enabled too? Is there a better way to do this?
Thanks, RafDev
I'm not really any expert but..
I wouldn't be afraid, there are rarely anyone with any Level 2, 4 7.
Security are far superior to the ones back to 2014.