Lua: delete loadstring()

Fixes the vulnerability introduced in commit 52ae31efb2.
This commit is contained in:
Jyrki Vesterinen 2018-07-28 08:16:00 +03:00
parent aa73b83600
commit 6450bada57

View file

@ -550,6 +550,8 @@ lua_kernel_base::lua_kernel_base()
lua_pushcfunction(L, intf_load);
lua_setglobal(L, "load");
lua_pushnil(L);
lua_setglobal(L, "loadstring");
cmd_log_ << "Initializing package repository...\n";
// Create the package table.