Is it really that big of an issue?

I tested some things against a target dummy. ClearFocus, TargetLastTarget, TargetNearestEnemy, and TargetUnit all properly throw addon_action forbidden errors. This further cements that ClearTarget, being part of the protected api, shouldn’t be able to be called from a tainted source, ie an addon or script. Makes me wonder what broke to allow this.

1 Like