All Snippets
Lua Snippet
Secure NUI Bridge with Token Validation
Description & Usage
Implements a tokenized NUI callback system to block unauthorized inspect-element JavaScript injection attacks in the browser layer.
Source Code (1 File)
| 1 | -- CLIENT-SIDE |
| 2 | local sessionToken = nil |
| 3 | |
| 4 | RegisterNUICallback('ui:ready', function(_, cb) |
| 5 | sessionToken = exports['core']:GenerateSessionToken() |
| 6 | cb({ token = sessionToken }) |
| 7 | end) |
| 8 | |
| 9 | RegisterNUICallback('ui:submitAction', function(data, cb) |
| 10 | if not sessionToken or data.token ~= sessionToken then |
| 11 | print("[Security] Unauthorized NUI payload detected!") |
| 12 | cb({ status = 'unauthorized' }) |
| 13 | return |
| 14 | end |
| 15 | |
| 16 | TriggerServerEvent('core:server:processNuiAction', data.action, data.payload) |
| 17 | cb({ status = 'ok' }) |
| 18 | end) |
| 19 | |
| 20 | function ToggleUI(display) |
| 21 | SetNuiFocus(display, display) |
| 22 | SetNuiFocusKeepInput(false) |
| 23 | SendNUIMessage({ |
| 24 | action = "SET_VISIBILITY", |
| 25 | visible = display |
| 26 | }) |
| 27 | end |
0 likes ·Sign in to like
Community Discussion (0)
Sign in to join the discussion and leave a comment.
Snippet Info
LanguageLua
Lines27
Chars755
Likes0