MXP Security
29 Sep 2014 17:44 #1
by Vodur
MXP Security was created by Vodur
We kinda need it 
On Aarchon we use Kavir's protocol snippet, which uses default MXP mode 7 (lock locked mode), utilizing mode 1 (secure line) to open and close tags as necessary. In this way, player input is never parsed for MXP unless explicitly made to do so in the server code.
Right now portal app doesn't require escape sequence for MXP, which means any valid MXP that comes to the client will be interpreted. This is not consistent with MXP spec and could create problems if silly players get wind of it and start opening 100 frames on somebody else's screen for giggles.
On Aarchon we use Kavir's protocol snippet, which uses default MXP mode 7 (lock locked mode), utilizing mode 1 (secure line) to open and close tags as necessary. In this way, player input is never parsed for MXP unless explicitly made to do so in the server code.
Right now portal app doesn't require escape sequence for MXP, which means any valid MXP that comes to the client will be interpreted. This is not consistent with MXP spec and could create problems if silly players get wind of it and start opening 100 frames on somebody else's screen for giggles.
Please Log in or Create an account to join the conversation.
