Skip to content

feat: allow no inject dialogue resource into extra_game_states#1214

Open
RickyYCheng wants to merge 1 commit into
nathanhoad:mainfrom
RickyYCheng:dev_config_injection
Open

feat: allow no inject dialogue resource into extra_game_states#1214
RickyYCheng wants to merge 1 commit into
nathanhoad:mainfrom
RickyYCheng:dev_config_injection

Conversation

@RickyYCheng
Copy link
Copy Markdown

#1209 raised some security concerns regarding DM.

This PR allows users to reasonably remove the injection of dialogue_resource, as DM is designed to be a stateless addon.

The injection of Godot objects (in this case, dialogue resources) could be used to modify scripts and trigger reloads, which introduces serious issues. The injection of Node objects also poses problems, such as calling get_tree().quit() or accessing low-level objects like get_tree().window.

ExampleBalloon will still inject the balloon node itself in balloon.start, but this injection is removable since custom balloons are expected to be designed and implemented by modifying the balloon template. Therefore, no related changes have been made to the balloon behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant