Skip to content

fix: Extend truename protection to offline players - #1208

Merged
Robotgiggle merged 3 commits into
FallingColors:1.21from
Olfi01:issue/1062-fix-truename-protection
Jul 26, 2026
Merged

fix: Extend truename protection to offline players#1208
Robotgiggle merged 3 commits into
FallingColors:1.21from
Olfi01:issue/1062-fix-truename-protection

Conversation

@Olfi01

@Olfi01 Olfi01 commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Fixes #1062

Even though I was only able to verify a possible exploit using another bug (list evaluation of stale iotas), it is still possible that an addon developer passes non-verified iotas to the getTrueNameFromDatum method.
To protect offline players as well, I added a boolean to the EntityIota like @slava110 suggested.

This change will make all previously saved entity iotas turn into Garbage. Fixed

@c-Caelum

c-Caelum commented Jul 24, 2026

Copy link
Copy Markdown

During deserialization, I suggest checking if it exists first. That way, previously saved iotas are not broken.

@c-Caelum

Copy link
Copy Markdown

It fits nicely with the validate method as well, so you can default to true (that is, it is a player iota) and upon validation, update the iota to reflect that. At least, I think that will work.

@Olfi01

Olfi01 commented Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

Thanks @c-Caelum :D

@Olfi01

Olfi01 commented Jul 25, 2026

Copy link
Copy Markdown
Contributor Author

I forgot to specify this in the comment as well: existing Entity Iotas wil nowl not turn into Garbage, I tested it :D
They are properly migrated now.

@Olfi01
Olfi01 force-pushed the issue/1062-fix-truename-protection branch from a2dff83 to 90db720 Compare July 25, 2026 15:55
@Robotgiggle
Robotgiggle enabled auto-merge July 26, 2026 02:00

@Robotgiggle Robotgiggle left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Robotgiggle
Robotgiggle added this pull request to the merge queue Jul 26, 2026
Merged via the queue into FallingColors:1.21 with commit 617fd52 Jul 26, 2026
7 of 8 checks passed
@github-project-automation github-project-automation Bot moved this from 📋 Backlog to ✅ Done in Hex Casting Jul 26, 2026
@Olfi01
Olfi01 deleted the issue/1062-fix-truename-protection branch July 27, 2026 10:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

3 participants