[Bf-committers] Blender 2.5 malicious scripting

jmsoler at free.fr jmsoler at free.fr
Wed Feb 24 17:11:14 CET 2010


Selon "Aurel W." <aurel.w at gmail.com>:

> Well, imho there hasn't been a release of blender, where code
> execution from malicious blend files wouldn't be possible with some
> effort. By preventing script execution you may prevent some kiddies to
> do so, but I think we all have to be aware of, that blender will never
> be able to securely process content from untrusted sources. And to be
> honest, I can live with that.
>
Sorry for this stupid question but since the python language is fully available
in Blender, I mean during the last eleven years, was there anybody that would
have really seen or downloaded only one script that already would have done any
malicious thing ?

jms


More information about the Bf-committers mailing list