EngineHub / CraftBook

🔧 Machines, ICs, PLCs, and more!
https://enginehub.org/craftbook/
GNU General Public License v3.0
301 stars 160 forks source link

Exploit: Users sitting in chairs within entry deny regions. #1236

Closed andrewkm closed 3 years ago

andrewkm commented 3 years ago

As title states, users can sit in chairs that are in entry deny regions.

Paper 1.16.4-Dev-#296 Craftbook 3.10.3-Dev-#4673 WorldGuard 7.0.5-Dev-#2084

https://www.youtube.com/watch?v=QYFKzECYSjA

me4502 commented 3 years ago

What happens if you do the same with a Minecart or horse?

me4502 commented 3 years ago

Seems this issue is actually on the WorldGuard end, it's not listening for EntityMountEvent in the move handling. It's only listening to VehicleEnterEvent. As chairs work by mounting an armour stand, it calls the entity event rather than the vehicle one.