EssentialsX

EssentialsX

2M Downloads

Powertools can bypass worldguard

JHarris12345 opened this issue ยท 2 comments

commented

Type of bug

Exploit

/ess dump all output

Too larger

Error log (if applicable)

No response

Bug description

You can use powertooled commands to bypass worldguard regions with blocked commands.

E.g If you have a worldguard region with a flag set to block the command "/spawn", you can bypass this by adding "/spawn" to a powertool

Steps to reproduce

  1. Make a worldguard region
  2. Block a command with the blockedcommands flag
  3. Add the command to a powertool
  4. Bypass it

Expected behaviour

It should not bypass worldguard

Actual behaviour

It bypasses worldguard

commented

This will not be fixed on our end. WorldGuard should be able to detect it somehow, it's not our job to hook into protection plugins to reverse engineer this functionality.

commented

Not sure that this is something we have interest in fixing (or can even reasonably fix) on our end.

There is also the question of whether WorldGuard has the means of detecting the command execution on their end, which would be ideal vs trying to block it in reverse from Essentials.