Skip to content

v1.0.4

Choose a tag to compare

View all tags
@Aesthetic-Engine Aesthetic-Engine released this 05 Mar 18:06
· 66 commits to main since this release
v1.0.4
c68ebca

Security

  • call_method denylist blocks dangerous method names (e.g. execute/load/save/shell/create_process)
  • set_property denylist blocks dangerous properties (script)
  • eval pattern filter blocks OS/Engine/FileAccess and file/process patterns
  • all commands now require token auth (ping/auth_info no longer exempt)
  • read buffer capped at 1 MB, max line length 64 KB
  • reject new incoming connections when a client is already connected
  • screenshot command rate limit added (10/sec)

Changed

  • Version bumped to 1.0.4 in plugin.cfg, mcp package, and startup banner
  • PROTOCOL.md and SECURITY.md updated for new error codes and behavior
Assets 2
Loading