[Freeciv-Dev] Re: (PR#13262) pubserver-in-a-diff

["Jason Short" <jdorje@xxxxxxxxxxxxxxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=13262 >

Per I. Mathisen wrote:

> What I did was modify these commands when compiled as pubserver so that
> they can _only_ read data from within the data directories, and /read will
> only accept files ending in '.serv'. See security comments in the patch.
> 
> For normal usage, we surely want the ability to load saves, scripts,
> scenarios and rulesets from whereever on your disk?

Only if you have hack access.

-jason