fix formatting mistakes in config file warning code block

Co-authored-by: A Thousand Ships <96648715+AThousandShips@users.noreply.github.com>
This commit is contained in:
betalars 2024-10-14 23:22:14 +02:00 committed by GitHub
parent aaf5443832
commit bcbd6e01b1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -164,15 +164,16 @@
<description> <description>
Loads the config file specified as a parameter. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on. Loads the config file specified as a parameter. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on.
Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed. Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
[b]Warning:[/b] Loading Data from a Config File may allow for remote code execution. This is non-trivial to midigate, but storing a [readme] file in the same directory can warn users against downloading untrusted configurations: [b]Warning:[/b] Loading Data from a Config File may allow for remote code execution. This is non-trivial to midigate, but storing a [code]readme[/code] file in the same directory can warn users against downloading untrusted configurations:
[codeblocks] [codeblocks]
[gdscript] [gdscript]
var config_path = "user://" var config_path = "user://"
var config_file_name = "my_game.config" var config_file_name = "my_game.config"
# check if configuration has been initialized: # Check if configuration has been initialized:
if not FileAccess.file_exists("%s%s" % [config_path, config_file_name]): if not FileAccess.file_exists("%s%s" % [config_path, config_file_name]):
var readme := FileAccess.open("%s%s" % [config_path, "README.txt"], FileAccess.WRITE) var readme = FileAccess.open("%s%s" % [config_path, "README.txt"], FileAccess.WRITE)
readme.store_string("Caution: It is not advised to use Config-files you find online, as malicious files may compromise your device.") readme.store_string("Caution: It is not advised to use Config-files you find online, as malicious files may compromise your device.")
readme.close()
[/gdscript] [/gdscript]
[/codeblocks] [/codeblocks]
</description> </description>