Allowing Custom Server Content - what can it do?

[Cray]

The setting 'Options-Multiplayer->Custom Server Content' allows servers you join to upload various custom content to your L4D2/downloads folder. I know they're used for custom sounds etc. and that servers like SirPlease require you to set it to 'Allow all' to join.

But what more can this setting do? I'm still a little fuzzy on this.

I know in the past it was abused to change people's configs, forcing them back to certain servers whenever they started a game, and even rebinding keys to connect to those servers, and similar rather nasty stuff. As far as I know these things were patched.

I wouldn't be the least bit surprise if there are still things you can do to abuse this, or if there are exploits (potential or known) that can be worked through it. I tend to leave it off due to its history and nature.

Is there anyone intimately knowledgeable on the topic who can provide some detail about what capabilities this setting offers servers these days. What has been fixed, what is still possible, what are potential risks nowadays?

ps: if you're unfamiliar with this, check your 'downloads' folder inside the Left4Dead2 game folder, there's likely to be a ton of useless files that you can safely delete (they'll be re-downloaded if needed, when your settings allow it).

[R󠀡F]

It cant be abused anymore. It can only download models, textures and sounds these days. Custom content gets downloaded to their respective folder path while only sprays get downloaded into "downloads" folder and then copied to temp folder.

[Blaquicat]

Back in the day servers admin could execute commands on client console which was used to mess with people configs and such.
Nowadays all it can do is download/upload resources.

[Trunten]

If I remember correctly, this is what often caused recolors of infected.
I remember finding this to be the cause of neon blue glowing witches.

[Ven]

When was this added?