Bad packet handling
TheAndrey opened this issue ยท 2 comments
I found a lot of security issues in the mod's packet handlers that hackers can use to harm the server ๐
MessageTakeWater
- this packet is not used. Can be used to destroy any block. Must be removed.MessageEnvelope
,MessagePackage
,MessagePresent
,MessagePresentContents
- these packets use the item received from the client. A hacker can put any items in a letter/parcel/gift to get them on the server (e.g. command block). You must use the container to transfer items to the letter inventory. Packet should used to transfer only the name and other attributes.
@MrCrayfish Are you going to fix it? This is important.