Commit Graph

87 Commits

Author SHA1 Message Date
Allink
ca0162b1e2
Add depth limit to SNBT 2023-06-02 23:31:39 +01:00
Luna
1b4d65a1e6
Add depth limit to Component deserializer (#85) 2023-05-31 21:03:10 -06:00
Luna
020afc9e99
Fix component extra empty array exploit (#83) 2023-05-29 17:32:04 -06:00
Luna
92a9dd9634
Backport patches from 1.19.4 (#80) 2023-04-28 20:53:31 -06:00
Video
f21a7fb408
Untitled patch (#70) 2022-11-28 19:20:57 -07:00
Allink
ae3dc6aa18
Prevent velocity freeze (#67) 2022-11-27 21:48:38 -06:00
VideoGameSmash12
8f07c9e142 Adds configuration option to disable game master blocks, fixes config issues 2022-10-02 19:47:55 -06:00
Video
1cd49aebf7 Serious bugfix
Server patch \#34 introduced a server-crashing bug where you could crash a Scissors 1.17.1 server simply by
going near the world border.This commit removes that original patch and re-implements part of what the
patch set out to do separately so that the painting crash exploit doesn't work, but the server won't crash
when you try to go near the world border.
2022-08-19 01:02:42 -06:00
Allink
3a4b3ffd34
Refuse to convert legacy messages over 1k characters (#62) 2022-08-17 21:45:44 -05:00
Allink
c48a56ac01
Fix out of bound chunks crashing server (#54) 2022-08-12 08:34:28 -05:00
Allink
fb17ef58f1
Fix crash on /timings paste (#55) (#56) 2022-07-27 21:25:58 -05:00
Allink
aba21aaf49
Fix ClickEvents on Signs bypassing permissions (#49) 2022-07-13 14:41:31 -05:00
Allink
dcf6dab4ee
Fix container click patch (#45) 2022-07-12 11:18:30 -05:00
Video
cb464a0b3a Removes patch that broke container clicking 2022-07-11 15:31:22 -06:00
Luna
71804a2e65
Validate block entity tag query positions (#42) 2022-07-11 15:15:03 -05:00
Allink
611e77e503
Add scissors config, command & disable command books (1.17.1) (#39)
* Add Scissors configuration file & command

* Disable running commands in books by default
2022-07-10 10:46:47 -05:00
Allink
3b8ad1a45d
Improve invalid container event patch (#36) 2022-07-10 01:07:55 -05:00
Allink
c2b2427622
Patch 'sploits (1.17.1) (#33)
* Prevent invalid container events

* Do not attempt to cast items to recipes
2022-07-09 21:21:35 -05:00
Video
a877b648d5 Fixes attributes being wrongfully removed due to a previous patch 2022-07-08 15:39:05 -06:00
Allink
bca6da00e8
Add spectator teleport event (#26) (#29) 2022-07-05 10:00:14 -06:00
Allink
c4afa459b5
Add spectator teleport event (#26) 2022-07-05 08:31:51 -06:00
Allink
2907ef1436
Add MasterBlockFireEvent 2022-07-04 22:26:04 +01:00
7885894176 Update CI link 2022-06-23 00:16:11 -05:00
Allink
106edf19b7
Prevent crash paintings and similar entity OOB exploits 2022-05-17 07:01:13 +01:00
Allink
236e8a95a3
Don't log invalid teams to console 2022-05-17 06:00:19 +01:00
Luna
9e244f52c9
Optimize getTagSize method in NbtUtility (#15)
The getAsString method which was used before uses StringTagVisitor,
which takes way too long.
2022-05-02 17:39:35 -06:00
Allink
61fd911106
Account for large items inside containers & add more methods to NbtUtility (#14) 2022-05-01 02:37:23 -06:00
Allink
6f32742d79
Fix a few of my patches being formatted incorrectly & fix the Minecart/Boat lag/crash exploit (#13)
* Fix a few of my patches being formatted incorrectly

* Limit amount of vehicle collision checks to 3 and discard vehicles if they collide with more than 15 other entities
2022-04-28 01:55:02 -06:00
dc1a5399f7 Futureproof the auto updater 2022-04-22 03:26:08 -05:00
Business Goose
39916e2102
Fix negative death times 2022-04-19 11:56:30 +01:00
Allink
c2618f2522
Reset large tags (#11) 2022-04-18 17:20:08 -06:00
d120903a36 Get branch for version checking automatically 2022-04-18 17:23:52 -05:00
5be5c364cd Update Paper 2022-04-14 20:07:20 -05:00
Video
42ce42b668 Fixes creative-killing potion effects and certain potion effect overflows 2022-04-11 13:38:34 -06:00
Video
a9cc494a94 Backport patch 888 from the regular Paper 2022-04-10 15:58:40 -06:00
Luna
d4a73a9b3f
Limit ListTags to 1024 elements (#9)
* Limit ListTags to 1024 elements

* a
2022-04-09 18:06:20 -06:00
Video
ecfd11a180 Don't query NBT from players in the nbt text component 2022-04-09 13:02:56 -06:00
Allink
646f5e6002
Prevent non-living entities from being spawned by spawners (#7) 2022-04-04 02:39:28 -06:00
Video
6760ad5417 Properly renames patch #19 to stop it from renaming itself 2022-04-04 02:13:12 -06:00
864f0915fd Remove API patches 2022-03-31 15:26:41 -05:00
Video
6950f39d8c Prevent attributes with invalid namespaces from being applied to CraftMetaItems 2022-03-30 18:24:02 -06:00
Video
8fdf4dce39 Validate String UUIDs during the CompoundTag -> GameProfile conversion process 2022-03-30 02:04:27 -06:00
Video
4cecc52099 Reject oversized components from updating + removes unnecessary imports from dev-imports.txt 2022-03-28 17:13:43 -06:00
ayunami2000
50e5b29c3d
Merge pull request #6 from AtlasMediaGroup/FS-176
block excessive nbt that kicks players
2022-03-28 17:30:11 -04:00
ayunami2000
31aad362c1 prepare for pr + fix typo 2022-03-28 17:24:47 -04:00
Video
77cc5f291f Better handling of invalid JSON components
This commit has some behavioral changes!

An issue regarding the treatment of invalid JSON components was raised this morning. This commit changes the behavior for many things using the component system to instead replace the invalid JSON with text saying "** Invalid JSON Component **". Some things will not do this (e.g. the conversion process).

Here's a list of things that are affected by this change:
- Hover event components (specifically, the show_entity action)
- NBT components
- Entity names
- Beacons
- Enchantment tables
- Scoreboard save data loading
2022-03-28 15:17:49 -06:00
ayunami2000
dbfbd9bca9 patch server side chunkbans 2022-03-28 17:07:28 -04:00
83cbb45e49 Attempt to fix security warnings 2022-03-26 23:25:45 -05:00
c2447a2967 Delete 0001-Add-getCommit-method-to-Bukkit.patch 2022-03-26 23:24:28 -05:00
a9ff8bbf56 This time it really works, trust me 2022-03-26 23:03:57 -05:00