Code Monkey home page Code Monkey logo

meadow-guarder-old's People

Contributors

dependabot[bot] avatar sampleprovider avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

meadow-guarder-old's Issues

Cross site scripting/styling and SQL injection vulnerability due to no Content Security Policy. This can lead to hackers stealing player's passwords, hacking the game, etc.

Hackers can inject malicious scripts from their website to hack another website. Content Security Policy (CSP): helps fight these hackers and blocks their malacious scripts. Content Security Policy can block scripts from other website or even the client side scripts because those could be malicious. THIS IS ABSOLUETLY IMPORTANT - HACKERS COULD HACK YOUR SERVER AND STEAL INFORMATION. Read more on: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP and test your CSP at: https://csp-evaluator.withgoogle.com/ to see if it is a strong CSP. IN FACT - HACKERS COULD STEAL THE PASSWORDS OF USERS AND HACK THEIR ACCOUNTS!!!!!!!!! Add CSP right now - this is priority. I know your website game doesn't have CSP because: CSP is included under the head tag and your game doesn't have it in the image below:
image

Players can abuse the auto move and auto click glitch.

Players can hold down the mouse/touchpad or a moving key (WASD) and then move to another tab and let go while it still registers in the game that you are holding them down thus, the bullets are auto fired and you can auto move too.
A possible solution is to detect if the player moves to another tab and stop the game from doing the glitch. You can use
page visibility web API: https://developer.mozilla.org/en-US/docs/Web/API/Page_Visibility_API - or maybe
window.onfocus and window.onblur: https://developer.mozilla.org/en-US/docs/Web/API/Window/focus_event

image

You can still do the auto click glitch!

The method to do the auto click glitch is to click and drag your mouse cursor to the url bar. Then, the player automatically fires.
Me doing the auto click glitch:

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.