Instead, each formspec is assigned its own callback function at runtime, which allows for completely localized event handling. The minetest.register_on_player_receive_fields( ) method has also been deprecated. This data is stored server-side via a session-based state table and it can even be initialized from within the formspec string itself using a new "hidden" element. in response to an event) with contextual data spanning multiple instances. Since the session ID token is retained throughout the lifetime of the formspec, it is therefore possible to update a formspec dynamically (e.g. Thus, integrity of the session ID is always guaranteed. Negotiation and validation with the client is entirely unnecessary. Due to the persistent nature of the Minetest client-server protocol (unlike HTTP, for example), all session tracking is performed server-side. Now each formspec session is assigned a unique session ID. It is intended to address a number of known security issues related to formspecs:įormspec names have been deprecated as they can be easily forged. OverviewĪctiveFormspecs is a framework that abstracts the builtin formspec API of Minetest. So it should prove secure and stable enough for any production environment, as long as you follow the instructions below.įor the latest release notes, as well as technical support requests, please visit the forum topic. It has been in continuous use on my server since December 2016 with only minor revisions.
#Minetest subgames install
It's easy to install and use, and arguably a more robust alternative to the builtin formspecs API.ĪctiveFormspecs is intended to be compatible with all versions of Minetest 0.4.14+.
#Minetest subgames mod
Since I've had many requests for source code from the just_test_tribute subgame, I finally decided to release ActiveFormspecs with instructions and code examples so that other mod authors can start making use of this framework as well. ActiveFormspecs adheres to the best practices described in sofar's excellent Securing Formspec Code topic. It evolved out of a recurring need for secure "node formspecs" on my server, but without the burden of "reinventing the wheel" with every new project.
ActiveFormspecs is a self-contained API that provides secure session tracking, session-based state tables, and localized event handling of formspecs for individual mods as well as entire subgames in Minetest.
0 kommentar(er)
