godotengine / godotengine/godot-docs

PCK could leak source code

Open
#10,087 3 comments 0 reactions 0 assignees View on GitHub
area:manual enhancement topic:export
Dominant language
reStructuredText
Stars
5.7k
Forks
3.8k
Avg merge
1d 20h
Merged PRs (30d)
25

Description

**Your Godot version:**
v4.3.stable

**Issue description:**
[This documentation page](https://docs.godotengine.org/en/stable/tutorials/export/exporting_pcks.html#:~:text=no%20source%20code%20disclosure%20needed%20for%20mods) says that when using PCK resource packs for mods or texture packs, it won't **disclose the source code**, but if a user puts a script in the PCK, it can get access and read all of the scripts. This can be dangerous for public releases of games or apps.

It would be a good idea to allow the dev **choose what gets imported** with `ProjectSettings.load_resource_pack()` (like textures or sounds) and avoid loading custom scripts.

**URL to the documentation page:**
https://docs.godotengine.org/en/stable/tutorials/export/exporting_pcks.html#

If you know how to fix the issue you are reporting please
consider opening a pull request. We provide a tutorial on
using git here: https://docs.godotengine.org/en/stable/community/contributing/pr_workflow.html,
writing documentation at https://docs.godotengine.org/en/stable/community/contributing/docs_writing_guidelines.html
and contributing to the class reference here: https://docs.godotengine.org/en/stable/community/contributing/updating_the_class_reference.html

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.