Include downloads into the security considerations.

This commit is contained in:
Yamagi 2024-06-22 16:55:40 +02:00
parent 468f90ad48
commit 5e6a73dc3f

View file

@ -23,10 +23,10 @@ Apart from this, we'll only document changes/additions here.
Quake II was released in 1997 into a world where security didn't matter.
The most important thing when connecting to random servers is: **Quake
II allows the server to do anything on the client!** The server may
execute any console command, it may overwrite any cvar and given the
rather fragile state of the command parsers chances are high that there
are remote code execution vulnerabilities. Only connect to trustworthy
servers!
execute any console command, it may overwrite any cvar, download any
file to your computer and given the rather fragile state of the command
parsers chances are high that there are remote code execution
vulnerabilities. Only connect to trustworthy servers!