Item 323 (SIGN) Not recognized. SEVERE CraftBook and WorldEdit security threat!
LadyCailinBot opened this issue ยท 2 comments
WORLDEDIT-2665 - Reported by kajar9
WorldEdit doesn't recognize the block 323 or the word SIGN. (it does with wallsign though)
There is no way to add it to disabled blocks, it simply doesn't work... creating a security threat with CraftBook
People with WorldEdit access are able to create CraftBook signs with WorldEdit even if they don't have permission to create them.
Example "//SET 323:1||[COMMAND]|op_@a" That would OP every player on the server.
And if they connect a redstone wire to the sign they bypass the "you don't have the permission to use this mechanic" too.
As your crew both manages WorldEdit and CraftBook there are 3 things need to be dealt with.
WorldEdit : Make it recognize sign block (323)
CraftBook : Prevent using WorldEdit to make functional CraftBook IC's or add some check feature to check whether they allowed to do them.
CraftBook : Disable connecting redstone wires to IC's if they don't have permission.
Comment by kajar9
It seems my report was invalid. As 323 was the item-id and 63 the actual sign block id.
Although WorldEdit and CraftBook should co-exist peacefully. (My previously proposed CraftBook updates)