Is there a way to have a public class method in your Unity C# code, for the purpose of calling it from other C# code, but prohibiting it from being called from the embedding Website via JavaScript? Will the “internal” keyword work, or are internal functions also exposed to SendMessage? What if I need a public function, that should under no circumstances be able to be called from an external JavaScript via SendMessage?
Bumping this to make sure that there is no answer, but it seems that this is currently not possible in Unity. So any JavaScript could potentially manipulate any Unity WebGL code, that features classes with public functions?
Thats really bad.