Skip to content

Commit 22470fc

Browse files
committed
Disable enforcePrivacy in packaged projects
The threat model of enforcePrivacy is so that people can open up sb3 files in the editor and not worry about their webcam being streamed to an attacker if the project doesn't use any unsandboxed custom extensions. That threat model doesn't really make sense in the packager when we're generating HTML files.
1 parent a9769bf commit 22470fc

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

src/packager/packager.js

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1585,6 +1585,9 @@ cd "$(dirname "$0")"
15851585
});
15861586
if (vm.renderer.setMaxTextureDimension) vm.renderer.setMaxTextureDimension(${this.options.maxTextureDimension});
15871587
1588+
// enforcePrivacy threat model only makes sense in the editor
1589+
if (vm.runtime.setEnforcePrivacy) vm.runtime.setEnforcePrivacy(false);
1590+
15881591
if (typeof ScaffoldingAddons !== 'undefined') {
15891592
ScaffoldingAddons.run(scaffolding, ${JSON.stringify(this.getAddonOptions())});
15901593
}

0 commit comments

Comments
 (0)