Fix group scan exploit - Githubissues

CivClassic / NameLayer

Allows the creation of configurable player made groups in Minecraft. Built for Paper 1.16.5

BSD 3-Clause "New" or "Revised" License

1 stars 19 forks source link

Fix group scan exploit #7

Closed henrydraton closed 5 years ago

henrydraton commented 5 years ago

The nlip command currently suffers from a bug that allows scanning groups for who is a member. This edit should solve the problem by reordering the permission check to before checking for if the player is in the group already.

Maxopoly commented 5 years ago

Superceded by https://github.com/CivClassic/NameLayer/commit/501dc19f8bdaaf4873c3f004d842168d6f16d1ad

Thanks for bringing it up though