Whitelisting of online content

The 3D Stream Radio addon has an integrated whitelist which is enabled by default. It is based on the installed whitelist on the server. The whitelist protects connected clients from streaming malicious content from arbitrarily URLs.

This is not to be confused with CFC Client HTTP Whitelist, which is a separate security addon this addon also supports.

Whitelisting FAQ

What does it protect against?

This protection will help against these (not limited to) threats:

• IP Grabbers, a preparatory attack vector used for subsequent DDoS attacks on clients.
• Malware that could abuse a vulnerability in GMod or the BASS sound engine.
• Unwanted, inappropriate or even illegal content.
• Other untrustworthy sources.

The built-in protection applies to this radio addon only, not any other addon you might have installed.

When is the whitelist active?

The whitelist is multiplayer only. It is active on listen servers and dedicated servers. It only applies for online URLs (e.g. https://...). For local file paths it is NOT active, because there are no external HTTP requests to be send.

Who can change the whitelist?

Only admins on the server can change it for their server. This includes adding, deleting or changing entries. This also works for included stock playlist entries.

How to change the whitelist

You change it by editing the playlist files.

This can be done in these ways:

• Use playlist editor Changes apply immediately.
• Use the quick whitelist options. Changes apply immediately.
• Edit the playlists manually. Changes do not apply immediately. Needs sv_streamradio_url_whitelist_reload to be run or a server restart to take effect.

Does it support wildcards or patterns?

No, it doesn't. It only supports direct URL entries. Please use CFC Client HTTP Whitelist if you need more advanced whitelisting features. Make sure you have read its documentation before using it.

Can this be disabled?

Yes, but I would not recommend to do so. The ConVar is: sv_streamradio_url_whitelist_enable 0/1 (Server/Admin only) The client can NOT disable it for them-selves.

Will I remove the whitelisting from this addon?

No, I will not remove it from this addon. It is here to stay. Please don't ask me to have it removed. If you got issues, properly report them and I will see if I can take care of them.

How are the checks done?

Only online URLs (e.g. https://...) will be checked. The client will ask the server if it is in a playlist file. Don't worry, results are cached on client and server to ease on in-game networking traffic. The checks happen before each and every online request an radio entity attempts to send.