Skip to content

v0.1.0b4

Pre-release
Pre-release
Compare
Choose a tag to compare
@danielballan danielballan released this 18 Jun 16:01
· 63 commits to main since this release

Changed

  • Minor implementation changes were necessary to make Tiled compatible with
    Numpy 2.0.
  • For improved security, the server-side array slicing function has been
    refactored to avoid using eval(). To be clear: there were no known
    exploitable vulnerabilities in the eval() approach. The input was validated
    against a regular expression before being passed to eval(). However,
    avoiding eval() altogether is better practice for defense-in-depth against
    potential code injection attacks due to current or future bugs in Tiled or
    its upstream dependencies.