Comments (1)
Current Idea would be to allow them to upload a Addon over the Webinterface which will be scanned by a various amount of tools, and then will go to manual checking where the provider of the bot will check the addon themself and check if its okay.
Afterwards it will simply be approved or denied based on the providers decision.
Major Issue about this is, that the provider might not see specific parts on just doesn't know better, so instead of doing that in the first place OR instead of only doing that. There should be a sandbox system integrated into the bot itself, to keep the addons in their own little devil box, to keep them from accessing any other important stuff.
Why? Without a proper sandbox the addon code which might be malicious could easly access the bot token, the SQL Worker and more!
We would need ALOT more checks and prevention lines to keep malicous actors from doing anything. Otherwise we could just remove the whole addon system. Which I dont want to, since its there to allow developers to make additions even quicker without making their complete own version of ree6 and needing to activily update and modify it.
from webinterface.
Related Issues (9)
- Webinterface Roadmap
- Update dependency me.carleslc.Simple-YAML:Simple-Yaml to v1.8
- Webinterface rework and overhaul. HOT 3
- Fix Issue related to Voice Level Leaderboard HOT 1
- NestedServletException: Handler dispatch failed; nested exception is java.lang.NoClassDefFoundError: jakarta/transaction/...
- Dependency Dashboard
- Improving our Webinterface and Website HOT 1
- Missing Level Rewards HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from webinterface.