Playing with Botania r1.9-339, I have found a way to get items for free from the Alfheim Portal. I won't post the steps here since it's an exploit.

If this is an unknown exploit, I can send email with steps.

The Schrödinger's end user, wanting an bug fixed, but not helping fixing it.

Cute, but no. If I didn't want to help fix the exploit, I'd keep it to myself and abuse it. Then I could build with blocks of elementium and dragonstone because, hey, free stuff!

I'm a software tester by nature and profession, so when I spotted two cross-site scripting bugs at work this week, I notified security that there were exploits on a specific page visible to the public. One of the security team dropped by so I could demonstrate what I had found. One exploit was known, but the second was not. So I typed that one up in our internal bug-tracking database, but I encrypted it so only the security team could see it. It's a few more hoops than a normal bug, but publicly announcing an exploit, even internally, is a stupid and fireable act.

So I'll let this sit here until someone is assigned this issue. Then I'll explain privately how the exploit is done so it can be fixed.

Email sent.

@Vazkii would you be willing to forward the info on how to perform so our server can be on the lookout for this till it gets fix please?

This issue is stale because it has been open for a while with no activity. Remove stale label or comment or this will be closed soon.