Comparing Unity-Technologies:develop-2.0.0...xmanning:develop-2.0.0 · Unity-Technologies/com.unity.netcode.gameobjects
Commits on Sep 27, 2025
-
Secure RpcMessage against SenderClientId spoofing
When a server receives an RpcMessage, it should update the SenderClientId to match the SenderId provided by the messaging manager. This is to prevent modified clients from spoofing their SenderClientId as other clients.
Commits on Oct 2, 2025
-
Only do permission validations on server
context.SenderId will be the server for a client receiving the proxied message, so the checks will not be accurate. The checks are also unnecessary considering the checks have already been done by the server.