Hoper Minecart can bypass husktown protection

WiIIiam278 / HuskTowns

A simple and elegant proxy-compatible Towny-style protection plugin

https://william278.net/project/husktowns

Apache License 2.0

76 stars 43 forks source link

Hoper Minecart can bypass husktown protection #489

Open LostUmbrella58 opened 3 months ago

LostUmbrella58 commented 3 months ago

Server running on latest 1.20.4 paper and latest HuskTown. As title described,players can push a hopper minecart into other's town (minecart can be placed out of chunks of other's town and since minecarts belong to entitied so that they cant be controlled by redstone interaction),so that they can directly steal stuffs in chests which are protected by HuskTown.

WiIIiam278 commented 2 months ago

I suppose it can. Maybe we need to just disable entity push collision in claims for non-owners? But I can see that causing other issues. Tough one, sort of difficult to fix (and honestly somewhat unlikely of an exploit to be practical in most scenarios)