mirror of
https://github.com/ddnet/ddnet.git
synced 2024-09-20 17:44:18 +00:00
716e8cd7f4
This allows every game server to provide its own HTTPS server for map downloads. Since the ingame protocol for downloading map data is very inefficient, this is desirable. Previously, only servers hosted by DDNet could benefit from this. Security concerns: - Attackers can find out whether a given HTTPS GET request matches a known answer. This isn't deemed to be problematic as no cookies for authentication are sent and only the whole response can be matched. - Sending requests to honeypot URLs to get people in legal trouble. This seems to be already possible with HTML image embeds, so it can't be that bad™. - Downloading huge files, filling up a player's disk. The players might cancel when seeing huge files. There's a generous limit of 1 GiB per map file. - Downloading huge files transparently compressed with gzip. See above. Fixes #5812. |
||
|---|---|---|
| .. | ||
| android | ||
| antibot | ||
| base | ||
| engine | ||
| game | ||
| macos | ||
| mastersrv | ||
| steam | ||
| test | ||
| tools | ||