Dynmap-Forge/Fabric

Dynmap-Forge/Fabric

888k Downloads

Setting "webchat-requires-login" to true does not prevent chat spying

paul-eff opened this issue ยท 1 comments

commented

Issue Description: I can prevent unauthorized users from using the web chat component (requiring them to login and create an account with the webregister command). But from what I can see this does not prevent said unauthorized users from seeing the ingame chat.

Basically I would assume "webchat-requires-login" disables all web chatting (also receiving messages) but it only prevents unauthorized users to chat, not from seeing the chat.
I am aware that I can disable all chat receiving capabilities (in the web) by disabling "org.dynmap.SimpleWebChatComponent.allowchat", but this then also applies to logged-in users.

  • Dynmap Version: 3.3-beta-4-617
  • Server Version: paper 1.18.1 build 198
  • Pastebin of Configuration.txt: https://pastebin.com/SM3GTC85
  • Server Host (if applicable): Selfhosted Ubuntu 20.04.3 LTS

[x] I have looked at all other issues and this is not a duplicate
[x] I have been able to replicate this

commented

webchat-requires-login is intended to control ability of web to contribute to chat, not to see chat. This is works as designed.

I'll look into adding an option to limit chat read to login, but it'll be some work, as chat event reporting is via the same mechanism as tile, marker, map and world updates.