you're right, of course. to keep the example simple, i only selected what i thought i would use to scan _G and print its contents. what i actually use will probably end up looking like the whitelist in my first post (without loadstring).
in the end, though, it probably won't be exactly like wow, and i'm okay with that as long as i can run untrusted code 'safely'.
|