WorldEdit Commands able to bypass WorldGuard Protections

[IngeniousCoder]

WorldEdit Version

7.3.3

WorldGuard Version

7.0.10

Platform Version

git-Paper-147

Confirmations

• [X] I am using the most recent Minecraft release.
• [X] I am using a version of WorldEdit compatible with my Minecraft version.
• [X] I am using a version of WorldGuard compatible with my Minecraft version.
• [X] I am using the latest or recommended version of my platform software.
• [X] I am NOT using a hybrid server, e.g. a server that combines Bukkit and Forge. Examples include Arclight, Mohist, and Cardboard.
• [X] I am NOT using a fork of WorldEdit, such as FastAsyncWorldEdit (FAWE) or AsyncWorldEdit (AWE)

Bug Description

When modifying blocks using WorldEdit, WorldGuard protections are completely ignored.

Expected Behavior

WorldEdit commands should be prevented from successfully executing.

Reproduction Steps

1. Ascertain you are unable to modify a block.
2. Use WorldEdit to select a region and set block

Optional WorldGuard-Report

No response

Anything Else?

It should be possible to determine who is the one who ran the worldedit command, given CoreProtect is able to do it.

[wizjany]

works as intended

[IngeniousCoder]

Possible to prevent this behavior?

[wizjany]

possible with the API. we won't be adding it as worldedit is not intended to be given to untrusted users in the first place.