rules

.cursor/rules/roblox/reference/engine/classes/ServerScriptService.yaml

@@ -0,0 +1,67 @@
+# This file is automatically generated. Please don't edit it manually.
+# To submit a bug report on the content, see
+# https://devforum.roblox.com/c/bug-reports/documentation-issues/72
+
+name: ServerScriptService
+type: class
+memory_category: Instances
+summary: |
+  A container service for server-only `Class.Script` objects.
+description: |
+  **ServerScriptService** is a container service for `Class.Script`,
+  `Class.ModuleScript` and other scripting-related assets that are only meant
+  for server use. The contents are never replicated to player clients at all,
+  which allows for a secure storage of important game logic. Script objects will
+  run if they are within this service and not
+  `Class.BaseScript.Disabled|Disabled`.
+
+  This service houses just one property,
+  `Class.ServerScriptService.LoadStringEnabled|LoadStringEnabled`, which
+  determines whether the `loadstring` function in Luau is enabled. It's
+  recommended to keep this disabled for security reasons, as misusing this
+  function can lead to remote code execution vulnerabilities.
+
+  Scripts running in ServerScriptService may need access to various other assets
+  which are not scripting-related, such as prefabricated models to be
+  `Class.Instance:Clone()|cloned`. Such assets should go in
+  `Class.ServerStorage`, which behaves similarly to this service except that
+  `Class.Script` objects will not run even if they are not
+  `Class.BaseScript.Disabled|Disabled`. Assets and `Class.ModuleScript` that are
+  useful to both the server and clients should go in `Class.ReplicatedStorage`
+  instead. Finally, you can further organize objects within this service through
+  the use of `Class.Folder|Folders` without affecting the way it behaves.
+code_samples: []
+inherits:
+  - Instance
+descendants: []
+tags:
+  - NotCreatable
+  - Service
+  - NotReplicated
+deprecation_message: ''
+properties:
+  - name: ServerScriptService.LoadStringEnabled
+    summary: |
+      Toggles whether or not the `loadstring` function can be used by server
+      scripts. Defaults to false.
+    description: |
+      Toggles whether or not the `loadstring` function can be used by server
+      scripts. Defaults to false.
+    code_samples: []
+    type: boolean
+    tags:
+      - NotReplicated
+      - NotScriptable
+    deprecation_message: ''
+    security:
+      read: None
+      write: None
+    thread_safety: ReadSafe
+    category: Behavior
+    serialization:
+      can_load: true
+      can_save: true
+    capabilities: []
+methods: []
+events: []
+callbacks: []