You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Functions in A3EOSCConfiguration are used to access the OSC configuration files from within the VRChat user directory. I do think it would be worth revisiting this code to make sure it is accessing these files at the appropriate time (only when OSC is enabled in the emulator) and using the correct paths / APIs.
The Combine() function does not compensate for directory traversal and relies on System.IO.File and System.IO.Directory classes to handle traversal, which they do not do universally.
These functions do not compensate for directory traversal. While this is a small issue in the current implementation, it is unclear if future feature enhancements might be a problem.
The text was updated successfully, but these errors were encountered:
Functions in A3EOSCConfiguration are used to access the OSC configuration files from within the VRChat user directory. I do think it would be worth revisiting this code to make sure it is accessing these files at the appropriate time (only when OSC is enabled in the emulator) and using the correct paths / APIs.
Original feedback from vrchat-community/vpm-listing-curated#5
The text was updated successfully, but these errors were encountered: