v0.1.0b4
Pre-release
Pre-release
Changed
- Minor implementation changes were necessary to make Tiled compatible with
Numpy 2.0. - For improved security, the server-side array slicing function has been
refactored to avoid usingeval()
. To be clear: there were no known
exploitable vulnerabilities in theeval()
approach. The input was validated
against a regular expression before being passed toeval()
. However,
avoidingeval()
altogether is better practice for defense-in-depth against
potential code injection attacks due to current or future bugs in Tiled or
its upstream dependencies.