Commit graph

165 commits

Author SHA1 Message Date
Allink 4d0d1bb69b
Add new abusable 1.19.4 commands to execute blocklist 2023-04-01 23:54:23 +01:00
Allink 634661e1fa
Improve distance selector detection 2023-04-01 23:46:17 +01:00
Allink a91c25f8c2
Use String#equals() instead of String == String in ServerCommand.java 2023-04-01 23:29:56 +01:00
Allink 1f18704dcd
Attempt to improve server performance under intense redstone load (#338) 2023-03-11 15:09:26 +02:00
Luna 98df416d89
Fix /execute command blocker bug (#337)
Fixes a bug where commands in /execute would not have modifications applied to them.
Example: `/execute run particle flame ~ ~ ~ 1 1 1 0 100 force @s` would not get modified before this PR, but now it gets modified to `/execute run particle flame ~ ~ ~ 1 1 1 0 10 force @s`
2023-02-25 18:45:50 +02:00
Chipmunk 91481b94e4
Append to an empty component instead of the prefix (#334) 2023-01-09 15:09:34 +02:00
Allink b3555d92d8
Display prefixes and display names in tab (#332) 2022-12-27 19:50:26 +02:00
Allink cbbc4937d5
Fix & improve skin command, improve username command (#331)
* Use per-player ratelimit for /username

* Improve the skin system

- Migrates skin getting over to Mojang. I do indeed understand that the Mojang API is more ratelimited and generally harder to use, it should be noted that it has an almost 0% chance of error. Compare that to Ashcon which, on some days, has a 50% chance of actually recognizing your account exists
- Uses CompletableFutures and a ExecutorService for making requests
- Renames SkinDownloader class to SkinManager class
- Makes SkinManager class static
- Limits the /skin command per-player
2022-12-27 19:50:02 +02:00
Chip baddda61aa
Use adventure for death messages (#329) 2022-11-18 16:09:55 +02:00
Chip 4a917201b4
Unblock selector even more (#327) 2022-11-05 00:11:40 +02:00
Chip 03a2fec6f4
Unblock selector in some commands (#324) 2022-10-31 00:10:24 +02:00
Kaboom 29207ef8b9
Merge pull request #318 from allinkdev/adventure
Use Adventure instead of legacy Bukkit/Spigot ChatColors
2022-10-16 02:40:37 +03:00
Allink 04b8ce1c3c
Migrate commands to Adventure, add new commands
New additions are Adventure-centric.
2022-10-15 23:25:26 +01:00
Allink 8296dc7075
Use a ChatRenderer and allow players to use MiniMessage in chat messages 2022-10-15 20:34:12 +01:00
business-fox 30f7768a4b
Block /scissors reload (#321)
* Block /scissors reload

Yeah this is another one of those "spam a random command until it breaks the server"
This only applies to servers which actually run scissors, which to my knowledge kaboom and all clones all run Scissors.
2022-10-11 22:24:00 +03:00
Allink 08f75cb374
Patch execute bypass (#320) 2022-08-13 18:26:59 +03:00
kaboom 1ebcae5e0c PlayerInteract.java: Remove dead code 2022-08-08 02:39:42 +03:00
Allink 5780f1a4a6
OOB Random Spawn Fix (#316)
* Add warning for "randomizeSpawn" option about the speed of chunk generation

* Limit random spawn to half a million blocks, which should hopefully fix the OOB error

* Recommend users to use Chunky for pre-world generation

* Add missing period

* Fix checkstyle violation
2022-07-18 20:32:19 +03:00
Allink 7f1057df08
Process player sign commands with Paper event (#319) 2022-07-18 20:30:56 +03:00
kaboom afdd1c1b4f Don't attempt to remove broken entities 2022-05-21 20:14:24 +03:00
kaboom 9c42f5d9e9 Make a few entity limits configurable 2022-05-21 20:05:48 +03:00
kaboom 0cda7acb6a Use consistent style for imports 2022-05-21 00:53:30 +03:00
kaboom 9e32dc5c25 Replace existing gamerule checks with WorldGameRuleChangeEvent 2022-05-21 00:32:54 +03:00
Allink 69ef06fc32
Handle full server kicks separately from other join restrictions (#315)
* Handle full server kicks separately from other join restrictions (closes #312)

* Add missing condition

* Add bracket back

* Remove extra bracket

Co-authored-by: Kaboom <58372747+kaboombot@users.noreply.github.com>
2022-05-20 07:18:37 +03:00
kaboom 6936749213 Optimize user prefix loading/saving 2022-05-20 07:06:09 +03:00
kaboom 67220510b1 Set maximum line length to 100 characters 2022-05-20 07:06:09 +03:00
kaboom 78067effe2 Use spaces instead of tabs 2022-05-20 07:06:08 +03:00
kaboom 28c78be287 Various cleanups for consistency 2022-05-20 01:46:33 +03:00
Allink 23da0661b3
Add more configuration options (#314)
* Add option to randomise spawn locations in config (closes #309)

* Add option to configure entity cap per chunk (closes #311)

* Suppress warnings for star imports

* Add missing return value & whitespace

* Explictly specify type of numbers in spawn randomization

* Upgrade to Java 11

* Make teleport centered

* Final configuration

* Remove star import

* Revert "Suppress warnings for star imports"

This reverts commit 2a2232b0da.

* Let's try 17
2022-05-20 01:42:35 +03:00
kaboom 3d1f8e5247 PlayerConnection.java: Remove hostname check for play.flame.ga
flame.ga is no longer a valid domain.
2022-05-02 19:42:04 +03:00
kaboom 8fdf9b227a EntitySpawn.java: Remove redundant event 2022-05-02 19:33:39 +03:00
kaboom a2d7885182 Re-add summon command to /execute block list 2022-01-06 17:06:55 +02:00
Luna 613df684e8
Block /geyser dump (#308) 2021-12-02 15:50:29 +02:00
kaboom f5af75f526 Catch commands containing spaces after slash
Fixes #307
2021-11-29 04:05:48 +02:00
Kaboom 5e12d92010
Use constants when possible 2021-09-13 22:47:29 +03:00
Kaboom aa460520ba
Use plugin logger instead of System.out
Fixes #303
2021-09-13 22:32:03 +03:00
LunaWasFlaggedAgain a57a6030b1
Cleaned up code + unblocked a few things (#301) 2021-09-13 21:50:24 +03:00
kaboom 7da29aeb6d Improve particle count limiter 2021-08-25 11:04:41 +03:00
hhhzzzsss 4e5e257534
Fixed tab completion for /deop and /op (#299) 2021-07-22 19:26:33 +03:00
hhhzzzsss e22044a158
Improved execute as/at/facing detection (#298)
* Improved execute as/at/facing detection

* Made atAsPattern a class attribute
2021-07-09 03:36:46 +03:00
Luna 4f1d2a0eab
Remove a few patches (#297) 2021-07-06 18:06:32 +03:00
Quad 41b19fe6ea
Prevent usage of @ selectors with spreadplayers (#294) 2021-04-26 22:01:53 +03:00
kaboom 235d2c9788 Sync changes 2021-04-18 05:34:59 +03:00
mathiascode 95d3e151df Update command restrictions 2021-04-18 05:27:58 +03:00
Business Goose 811178d30a
Patch integers of value 20 million and up in commands (#17)
* Patch integers of value 20 million and up in commands

* You know, like, patch the bug?
2021-04-18 05:25:43 +03:00
Quad a3ea2d7498
Patch title unicode kick exploit (#293) 2021-04-18 05:00:12 +03:00
Apmunute 211ef6e96a
Patch exploits (#290)
/execute as @e run banlist
/execute as @e run difficulty
/execute as @e run help
/execute as @e run list
/execute as @e run locate
/execute as @e run locatebiome
/execute as @e run seed
/execute as @e run whitelist

/execute as @e facing entity @e eyes run seed

most of these are spam exploits
2021-04-10 15:02:02 +03:00
mathiascode 97696ae601 Catch title command in /execute 2021-01-20 10:12:47 +02:00
mathiascode 207387a028 Improved target selector detection for /title command 2021-01-20 09:38:26 +02:00
mathiascode 1adb54013a Remove check for /say command
There are more commands in addition to /say that allow target selectors, and the exploit only targets Minecraft 1.12.2 and older. As those versions are over 3 years old, there isn't much point in supporting them.
2021-01-20 09:17:13 +02:00