Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dominion 无法针对 SlimeFun粘液科技 *储存单元* 进行保护 #54

Open
World-sudo opened this issue Jan 24, 2025 · 10 comments
Open

Dominion 无法针对 SlimeFun粘液科技 *储存单元* 进行保护 #54

World-sudo opened this issue Jan 24, 2025 · 10 comments
Labels
In Progress ... Development in progress ... Vulnerabilities Previlige bug, should be processed immediately.

Comments

@World-sudo
Copy link

BUG描述

针对粘液科技 SlimeFun的最新版本
有针对于玩家资源储存的安全问题

复现方式

Bug复现步骤：
玩家在默认领地下（即有权限移动），可任意通过粘液科技储存模块拿取东西
无视权限 （因为粘液科技的储存是通过 木头+告示牌等（不了解，但目前是可右键木头拿取，应该是粘液科技的设定））

正常情况的表现

玩家无法与木头交互 （貌似 粘液科技与res插件有兼容）

截图

Image

Image

运行环境:

  • 服务器系统：win
  • 服务端核心：paper
  • 服务端版本：1.21
  • 客户端版本：1.21
  • 插件版本：3.3.1-beta

补充信息

无
@World-sudo
Copy link
Author

eee sorry 忘记测试最新版 稍后我查看一下

@World-sudo
Copy link
Author

暂有解决方案是关闭移动权限 并放置在中心位置 添加反作弊防止Reach怪

@ColdeZhang ColdeZhang added Under Discussion Share your ideas about it. Vulnerabilities Previlige bug, should be processed immediately. labels Jan 24, 2025
@ColdeZhang
Copy link
Owner

可以有办法解决这个问题，但是可能会破坏其他用了箱子菜单的插件（本质上就是禁止打开这种自定义的箱子UI）

具体实施方案需要再斟酌一下

@ColdeZhang
Copy link
Owner

@World-sudo 这个存储单元是slimefun的基础内容还是附属包里的？

@World-sudo
Copy link
Author

是否可以通过检测他的一些tag呢？
或者特殊id什么的因为他那个材质包有个item-model

@ColdeZhang
Copy link
Owner

这个问题在群里已经讨论出解决方案了，需要Dominion去sf的源码里添加支持

等具体实现可能需要较长的一段时间，可以关注本issue或slimefun的更新

@ColdeZhang ColdeZhang added In Progress ... Development in progress ... and removed Under Discussion Share your ideas about it. labels Jan 25, 2025
@World-sudo
Copy link
Author

okok，谢谢哥

@ColdeZhang ColdeZhang reopened this Jan 25, 2025
@ColdeZhang
Copy link
Owner

ColdeZhang commented Jan 25, 2025 •
edited
Loading

该issue不关闭 用于跟踪后续进展

@World-sudo
Copy link
Author

噢噢

ColdeZhang added a commit that referenced this issue Jan 26, 2025
@ColdeZhang
add flag check method in api to support slime-fun etc. #54
4863413
@ColdeZhang
Copy link
Owner

已完成对 slime-fun 的兼容，需等待 slime-fun 官方完成相应的合并更新

Slimefun/dough#278

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
In Progress ... Development in progress ... Vulnerabilities Previlige bug, should be processed immediately.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ColdeZhang @World-sudo