sync script improvs

source/Main.hx

@@ -245,6 +245,11 @@ class Main extends Sprite
 			});
 		});
 
+		FlxG.signals.postUpdate.add(() -> {
+			if (online.backend.SyncScript.activeUpdate)
+				online.backend.SyncScript.dispatch("update", [FlxG.elapsed]);
+		});
+
 		online.backend.SyncScript.resyncScript(false, () -> {
 			online.backend.SyncScript.dispatch("init");
 		});

source/online/backend/Deflection.hx

@@ -73,6 +73,9 @@ class Deflection {
 		classBlacklist.push(online.util.FileUtils);
 		classBlacklist.push(online.util.HTTPClient);
 
+		// SyncScript can load malicious scripts
+		classBlacklist.push(online.backend.SyncScript);
+
 		// `polymod.*`
 		// Contains functions which may allow for un-blacklisting other modules.
 		for (cls in CompileTime.getAllClasses('polymod')) {

source/online/backend/SyncScript.hx

@@ -8,6 +8,7 @@ import sys.FileSystem;
 class SyncScript extends SScript {
 	public static var syncScript:SyncScript;
 	public static var data:Any = {};
+	public static var activeUpdate:Bool = false;
 
 	public static function resyncScript(threaded:Bool = true, ?onDone:Void->Void) {
 		if (threaded) {
@@ -25,6 +26,7 @@ class SyncScript extends SScript {
 
 	static function retrieveScript():String {
 		if (FileSystem.exists("sync.hxs") && ClientPrefs.isDebug()) {
+			Alert.alert("[WARNING] Loaded some script from the local storage!!!");
 			trace("loading sync script from local storage...");
 			return File.getContent("sync.hxs");
 		}
@@ -62,6 +64,8 @@ class SyncScript extends SScript {
 		set("data", data);
 		set("print", s -> Sys.println(s));
 		set("typeof", s -> Type.getClassName(Type.getClass(s)));
+		set("parent", () -> return this);
+		set("alert", (title, ?message) -> Alert.alert(title, message));
 	}
 }
 #end