wow-api-lua-environment

The WoW addon taint system tracks execution origins to prevent unauthorized secure code modifications. Taint propagation occurs when insecure addon code interacts with protected Blizzard functions, triggering execution blocks during combat lockdown to maintain UI security.

Use hooksecurefunc to attach a post-hook callback to a secure Blizzard function without causing taint. Your addon observes the function's execution and arguments safely, executing code after the original secure call completes without altering its behavior.

WoW addon code breaks during combat lockdown because the InCombatLockdown security restriction disables protected frame modifications and ability execution. This Blizzard security mechanism prevents automated combat actions, blocking insecure addon code from altering the UI.

Yes, you can use C_Timer to schedule delayed or repeating function calls within the WoW Lua sandbox. It provides a secure, Blizzard-approved API for timer management that respects the game's restricted execution environment.

The FrameScript sandbox is World of Warcraft's restricted Lua 5.1 runtime environment. It isolates addon execution by blocking specific OS-level functions and enforcing the taint system, ensuring addons cannot compromise game client security.

Use issecurevariable to check if a specific WoW variable or function is free of addon taint. It returns a boolean indicating secure status, allowing developers to verify whether their code meets Blizzard's secure execution model requirements.