Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Renew Blocked Commands and CVar Checklist #9

Open
1 of 8 tasks
DJPlaya opened this issue Nov 21, 2018 · 5 comments
Open
1 of 8 tasks

Renew Blocked Commands and CVar Checklist #9

DJPlaya opened this issue Nov 21, 2018 · 5 comments
Assignees
@DJPlaya
Labels
help wanted Extra attention is needed improvement An improvement of existing Functions and Code

Comments

@DJPlaya
Copy link
Owner

DJPlaya commented Nov 21, 2018 •
edited
Loading

There are propably more (newer) CMDs and CVars to check.
Older Exploits are also probably fixed now.

Checked:

  • CS:GO
  • TF2
  • CS:S
  • L4D1
  • L4D2
  • Insurgency
  • DOD:S
  • HL2:DM

TODO: Crosschecks todo later

|-CS:GO
-|CMDs
cl_ent_bbox
cl_ent_absbox
cl_ent_rbox
showtriggers_toggle

-|CVars
cl_particles_show_controlpoints 1
cl_particles_show_bbox 1
showtriggers 1

|-TF2
-|CMDs

-|CVars

|-CS:S
-|CMDs

-|CVars

|-L4D1
-|CMDs

-|CVars

|-L4D2
-|CMDs

-|CVars

|-Insurgency
-|CMDs

-|CVars

|-DOD:S
-|CMDs

-|CVars

|-HL2:DM
-|CMDs

-|CVars
@DJPlaya DJPlaya added help wanted Extra attention is needed improvement An improvement of existing Functions and Code labels Nov 21, 2018
@DJPlaya DJPlaya self-assigned this Nov 21, 2018
DJPlaya added a commit that referenced this issue Aug 6, 2019
@DJPlaya
Small Update
e96b085 
*Addressed Bug related to an misnamed Cvar in CSS #9
@Nerus87
Copy link

Nerus87 commented Apr 22, 2020 •
edited
Loading

cl_cmdrate values are NOT different than ^\d+$ (CSS)

@DJPlaya
Copy link
Owner Author

DJPlaya commented Apr 22, 2020

cl_cmdrate values are NOT different than ^\d+$ (CSS)

What do you mean, i dont understand?

@Nerus87
Copy link

Nerus87 commented Apr 22, 2020 •
edited
Loading

When someone set cl_cmdrate "z" there is an exploit on the server-side, that the client hides his real latency on the scoreboard. Probably conversion string to int problem.

^\d+$ - regex check.

@DJPlaya
Copy link
Owner Author

DJPlaya commented May 18, 2020 •
edited
Loading

Ahh, i understand. I will add an Check for this.

@DJPlaya DJPlaya mentioned this issue May 29, 2020
Closed
@DJPlaya
Copy link
Owner Author

DJPlaya commented May 29, 2020 •
edited
Loading

@Nerus87 Sorry it took so long, will be fixed in the next Update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DJPlaya DJPlaya

Labels
help wanted Extra attention is needed improvement An improvement of existing Functions and Code
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Nerus87 @DJPlaya