为什么 CoreGui RobloxLocked 在 DataModel 中以及为什么受信任的用户不能使用 CoreScripts?

发布于 2024-10-04 00:34:19 字数 259 浏览 0 评论 0原文

我们应该能够访问其中的一些内容,以便我们可以编辑 CoreGui 内每个 GUI 对象的位置。那么,除了安全原因之外,为什么我们不允许编辑 GUI 对象的放置呢?

另外,为什么受信任的用户不能使用 CoreScripts?如果他们需要访问 HttpGet 以便能够提供一个很好的显示来显示他们最好的朋友在当前时间和地点的位置,该怎么办?社会服务并不总是能起到作用。

开发者(或任何其他有经验的 Roblox 玩家,尤其是对 UI 了如指掌的玩家)能否尽其所能回答这些问题?

We should be able to access some of it so that we can edit the placement of each GUI object inside of CoreGui. So, other than security reasons, why are we not allowed to edit placement of GUI objects?

Also, why can't trusted users use CoreScripts? What if they need to access HttpGet so they can provide a nice display showing where their best friend is at the current time and place? SocialService won't always do the trick.

Can a developer (or any other experienced Roblox player, particularly one that knows the UI in and out) please answer these questions to the best of his/her ability?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

神爱温柔 2024-10-11 00:34:19

一些 GUI 对象(例如报告滥用按钮)我们不希望用户能够删除。另一个敏感区域是聊天窗口。如果它是完全可编写脚本的,那么您可以编写一个脚本,使其看起来像是另一个用户在说一些他没有说的话。这并不是真正可取的。

HttpGet 目前是一个特权函数,主要有两个原因:

  1. 它允许用户将动态内容放入关卡中,这将使审核成为一项更加困难的任务。
  2. 编写不当或恶意编写的脚本可能会使 HttpGet roblox.com 陷入无限循环,从而耗尽我们的服务器资源。

没有明显的好处,但有一些明显的缺点。我们更愿意只解决为了发布功能而需要解决的问题,因此对于此类事情我们会谨慎行事。如果我们稍后决定开放新功能,例如通过 API 提供 ROBLOX 社交图谱,我们可以使用专用界面来实现这一点,该界面限制您在给定时间内可以向网站发出的请求数量,并且仅返回我们确信我们希望您能够获得的信息。

有趣的是,由于同样的原因,Adobe Flash 播放器在很长一段时间内不支持 TCP 套接字。

Some GUI objects like the report abuse button we don't want users to have the ability to be able to remove. Another sensitive area is the chat window. If it was completely scriptable, you could write a script to make it look like another user was saying something that he wasn't. This is not really desirable.

HttpGet is currently a privileged function for two main reasons:

  1. It would allow users to get dynamic content into levels, which would make moderation a more difficult task.
  2. Poorly or maliciously written scripts could HttpGet roblox.com in an infinite loop, sapping our server resources.

There was no obvious benefit, but some obvious downsides. We prefer to solve only the problems that need to be solved in order to ship features, so we err on the side of caution for things like this. If we later decide to open up new functionality, like making the ROBLOX social graph available through an API, we can do that with a dedicated interface that limits the number of requests you can make to the website in a given period, and only return the info that we are sure we want you to be able to get.

It's interesting to note that for a very long time Adobe Flash player didn't support TCP sockets for the same reason.

时光暖心i 2024-10-11 00:34:19

我在 OBC 演员阵容中问过这个问题,特别是关于在 CoreGui 中编辑 UI 的问题。然而,我不确定什么安全原因可以阻止这种情况。他们确实回复了 - 答案是:“好吧,我们绝对不希望您移动小帮助图标或退出按钮。”

我感觉一般原因是因为如果所有东西都放错了地方,用户会感到困惑。例如,如果您进入一个网站,您可以在其中玩该公司制作的几款游戏(例如 ROBLOX),您是否会期望每个游戏中的退出或帮助按钮都以不同的方式放置?

他们确实说过我们可以改变颜色。

希望这能解决问题。

I asked this in the OBC cast, specifically about editing the UI inside CoreGui. I'm not sure what security reasons could be preventing this, however. They did reply - the answer was, "Well, we definitely don't want you moving the little help icon, or the exit button."

I got the feeling the general reason is because users would become confused if everything was misplaced. For example, if you went into a website where you could play several games all made by that company (like ROBLOX), would you expect the exit or help buttons to me placed differently in every game?

They did say we will be able to change the colours.

Hope this clears things up.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文