Zrips / CMI

115 stars 97 forks source link

Armorstand renaming bypass format #8868

Closed PoliticraftMC closed 3 months ago

PoliticraftMC commented 3 months ago

Description of Issue

The player can have renamed armor stands in 2 ways:

Rename the armor stand with the permission you added Rename it with a renamed name tag in hand Breaking an armor stand renamed in one of these ways allows the player to have an armor stand in their inventory with a special format that they should not have had.

You added a permission, but what is needed is rather to prevent a renamed armor stand from dropping with the reformatted name.

Version Information

[15:14:45 INFO]: --------------------------------------------------
[15:14:45 INFO]: Version du plugin CMI : 9.7.2.4 Unknown CMIB  MySQL-> 9.7.4.0
[15:14:45 INFO]: CMILib: 1.4.7.16 -> 1.5.0.1
[15:14:45 INFO]: Server: Paper(307) 1.20.2-R0.1-SNAPSHOT-
[15:14:45 INFO]: CMI economy: Activé Vault: 1.6.10(+) CMI Chat: Activé 
[15:14:45 INFO]: Modules -> 57 enabled 2 disabled: tablist, votifier
[15:14:45 INFO]: --------------------------------------------------

Errors

No response

Relevant Config Sections

No response

Relevant Plugins

No response

Agreements

Zrips commented 3 months ago

This isint a bug in particular. If player has access to manetags which can be renamed to whatever they want and use that to rename armor stand, or have access to armor stand renaming which allows you to set armor stands name to whatever you want, then its all up to the player to do what he can with his permissions