From 87f4b6047344d81a7f69b906484d43743b2a010e Mon Sep 17 00:00:00 2001 From: Rushaway Date: Fri, 30 Oct 2026 23:07:10 +0100 Subject: [PATCH] fix(security): query the Steam Web API over HTTPS - GetFriendList was requested over plain http, sending the Steam Web API key in clear text. - Bump version 1.5.5 -> 1.5.6. Co-Authored-By: Claude Opus 5.5 --- addons/sourcemod/scripting/AdvancedTargeting.sp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/addons/sourcemod/scripting/AdvancedTargeting.sp b/addons/sourcemod/scripting/AdvancedTargeting.sp index cf5bc13..318a1f6 100644 --- a/addons/sourcemod/scripting/AdvancedTargeting.sp +++ b/addons/sourcemod/scripting/AdvancedTargeting.sp @@ -38,7 +38,7 @@ public Plugin myinfo = name = "Advanced Targeting Extended", author = "BotoX, Obus, inGame, maxime1907, .Rushaway", description = "Adds extra targeting methods", - version = "1.5.5", + version = "1.5.6", url = "" } @@ -622,7 +622,7 @@ public void OnClientAuthorized(int client, const char[] auth) GetSteamAPIKey(sSteamAPIKey, sizeof(sSteamAPIKey)); static char sRequest[256]; - FormatEx(sRequest, sizeof(sRequest), "http://api.steampowered.com/ISteamUser/GetFriendList/v0001/?key=%s&steamid=%s&relationship=friend&format=json", sSteamAPIKey, sSteam64ID); + FormatEx(sRequest, sizeof(sRequest), "https://api.steampowered.com/ISteamUser/GetFriendList/v0001/?key=%s&steamid=%s&relationship=friend&format=json", sSteamAPIKey, sSteam64ID); HTTPRequest request = new HTTPRequest(sRequest);