Can bypass regions with mob spawn egg when used on water.
crumpkatrina opened this issue ยท 1 comments
WorldEdit Version
Bukkit-Official(7.2.15-SNAPSHOT+6372-93c0d36)
WorldGuard Version
Bukkit-Official (7.0.8-SNAPSHOT+2231-bddfbdd)
Platform Version
Paper 1.19.4 Build 514
Confirmations
- I am using the most recent Minecraft release.
- I am using a version of WorldEdit compatible with my Minecraft version.
- I am using a version of WorldGuard compatible with my Minecraft version.
- I am using the latest or recommended version of my platform software.
- I am NOT using a hybrid server, e.g. a server that combines Bukkit and Forge. Examples include Arclight, Mohist, and Cardboard.
- I am NOT using a fork of WorldEdit, such as FastAsyncWorldEdit (FAWE) or AsyncWorldEdit (AWE)
Bug Description
When inside a region you do not have access to, aiming at water, at just the right angle, so your client isn't selecting any block behind the water, as such: (https://i.imgur.com/uIA0HbX.png) as opposed to as such: (https://i.imgur.com/7MzAUji.png) you are able to bypass region protection, and place mob spawn eggs, spawning the mob.
Expected Behavior
Respect region protection and do not allow item usage if not part of the region, regardless of how your client is aimed.
Reproduction Steps
- Create region.
- Use a typical spawn egg, such as a cow spawn egg.
- Aim at water as shown in first screenshot in Bug Description section.
- Right click to place mob bypassing protection.
Optional WorldGuard-Report
No response
Anything Else?
Using block-entity-spawns-with-untraceable-cause: true - is a temporary solution, however this breaks a wide variety of other entity spawn related things on the server, to the point where running this setting on true is simply game-breaking.
there isn't much we can do here short of doing raytraces for every interact. mojang has some specific coding for spawn eggs that do that raytracing internally checking for liquids, and thus bypass bukkit block interaction events.
one could in theory add spawn eggs to the "use at feet" config option, but users could still stand outside the region and place into it.