How secure are unity scene scripts?

Questions & Answers
1

Hi,

I’m playing with an idea that requires my Unity application to load scenes build by different developers.

My question is about the scripts available in those scenes. Are they completely sandboxes to the Unity functionalities only, or are developers able to add platform specific ‘spooky’ code? For example code that accesses the filesystem on Windows and/or OS-X.

Thanks in advance,

Peter Vrenken

2

Many example code snippets demonstrate how to access System.IO/Filesystem stuff, so the answer to your question is developer’s can write code that accesses filesystems.

3

It’s trivial for Unity code to access the host file system using the System.IO classes, and to launch arbitrary 3rd party processes using System.Diagnostics.Process.Start() . So, no, definitely NOT sandboxed!