cl_filterstuffcmd

[Blyte]

Does anyone know if this cvar is set to 1 (on) by default now?
I ask because some server mods do not work for clients if it is set to 1.

[simolkaw]

i think yes

Half-Life update for April 11, 2019
Larger changes:
Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as connect, bind, quit and certain cvars such as cl_filterstuffcmd are now only executable by trusted sources.
Setting cl_filterstuffcmd to a value greater than zero (e.g. cl_filterstuffcmd 1) will set a number of commands that are potentially abusable, such as say, fps_max, and setinfo, to also be only executable by privileged sources.


and to be sure
Just change your config.cfg and userconfig.cfg files to read only.