[26.1.2] Director's Camera 1.0.2
Curse Maven Snippet
What's new
- Security:
camera exportandexport scriptnow encode cutscene names and anchor ids as JavaScript string literals. Before this, an id containing a quote, backslash or line separator could break out of its string and add code to the generated script. Regenerate any script exported from an untrusted anchor id or recording. - Security:
exportrefuses a cutscene id whose path leaves<game dir>/directorscamera/export/. Before this,..in an id could write the JSON file anywhere the game process can write.
This mod has no additional files

