Debug items may be freely used by bad actors
andriihorpenko opened this issue ยท 0 comments
Describe the bug
If a bad actor gets access to debug tools by any means (e.g. packet hack), they can freely use their destructive features (like Eraser and Meteorite Placer) to snap a world in half.
Debug commands are available for server ops only, so should be debug items (creative mode check would work as well).
Linked Discord conversation
How to reproduce the bug
Obtain any debug item and use it without server op status.
Expected behavior
Validate whether a player can use debug items (either is a server op or has creative mode enabled).
Error message would be nice to let a player know when and why the item can't be used.
Additional details
No response
Which minecraft version are you using?
1.21
On which mod loaders does it happen?
NeoForge, Forge, Fabric
Crash log
blank