From 0b1f87dc961336c21f40a50f39adc4c192dd00f8 Mon Sep 17 00:00:00 2001 From: qnx Date: Sat, 22 Jun 2024 12:38:23 +0200 Subject: [PATCH] fix!: Prevent tampering bypass by changing error handling This whole section would've been bypassable by just doing: ``error = function() return end`` * Change to return print --- src/prometheus/steps/AntiTamper.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/prometheus/steps/AntiTamper.lua b/src/prometheus/steps/AntiTamper.lua index 58a9b8c..409a07b 100644 --- a/src/prometheus/steps/AntiTamper.lua +++ b/src/prometheus/steps/AntiTamper.lua @@ -105,7 +105,7 @@ function AntiTamper:apply(ast, pipeline) end code = code .. [[ local gmatch = string.gmatch; - local err = function() error("Tamper Detected!") end; + local err = function() return print("Tamper Detected!") end; local pcallIntact2 = false; local pcallIntact = pcall(function()