Skip to content

fix: enable secure network event defaults #142

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
pushkart2 wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

fix: enable secure network event defaults #142

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions misc.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,12 @@
# Used to block REQUEST_CONTROL_EVENT routing based on a configurable policy. Find more info here: https://docs.fivem.net/docs/server-manual/server-commands/#sv_filterrequestcontrol-mode
# Default: 0
# Type: int
# set sv_filterRequestControl 0
set sv_filterRequestControl 1

# Used if sv_filterRequestControl is set to 1 or 3. Allows you to set after how long (based on entity creation time in milliseconds) an entity should be blocked from a REQUEST_CONTROL_EVENT
# Default: 30000
# Type: int
# set sv_filterRequestControlSettleTimer 30000
set sv_filterRequestControlSettleTimer 30000

# Used to prevent users from using modified client files. See: https://docs.fivem.net/docs/server-manual/server-commands/#sv_purelevel-level
# Default: 0
Expand All @@ -41,17 +41,17 @@
# Used to prevent users from routing NETWORK_PLAY_SOUND_EVENT through the server, which is commonly used by malicious actors. This is set to true by default (allow routing)
# Default: true
# Type: boolean
# set sv_enableNetworkedSounds true
set sv_enableNetworkedSounds false

# Enabling it (by setting it to true), will allow users to route REQUEST_PHONE_EXPLOSION_EVENT through the server. The main drawback behind enabling this, is that it can also be used by malicious actors.
# Default: false
# Type: boolean
# set sv_enablePhoneExplosions false
set sv_enableNetworkedPhoneExplosions false

# A boolean console variable introduced in server version 8540 that can be used to prevent users from routing SCRIPT_ENTITY_STATE_CHANGE_EVENT through the server, which is commonly used by malicious actors.
# Default: true
# Type: boolean
# set sv_enableNetworkedScriptEntityStates true
set sv_enableNetworkedScriptEntityStates false

# Any profile settings can be enforced by the server by using setr to replicate it to the client.
# All possible settings can be found in your own FiveM installation at "C:\Users\user\AppData\Roaming\CitizenFX\fivem.cfg"
Expand Down