Merge pull request #19 from mt-sane/patch-2

Fixed security issues. Open files read only.
2015-08-22 10:20:13 -05:00 · 2015-08-22 10:20:13 -05:00 · b8b963b003
parent 85e278b56f c5bf4d9d1e
commit b8b963b003
1 changed files with 1 additions and 1 deletions
--- a/mods/minetest-skins/skins/meta.lua
+++ b/mods/minetest-skins/skins/meta.lua
@ -1,7 +1,7 @@
 skins.meta = {}
 for _, i in ipairs(skins.list) do
 	skins.meta[i] = {}
-	local f = io.open(skins.modpath.."/meta/"..i..".txt")
+	local f = io.open(skins.modpath.."/meta/"..i..".txt", "r")
 	local data = nil
 	if f then
 		data = minetest.deserialize("return {"..f:read('*all').."}")