BookExploitFix icon

BookExploitFix -----

Fixes an exploit allowing hack clients to create books with JSON commands




Changes:
  • Improve error handling when a player tries to create a book in creative with invalid page content.
----------, May 12, 2024

Changes:
  • Add workaround for a rare error spam if a book contains pages with invalid JSON. This currently also kicks the player to prevent server lag due to excessive error spamming.
----------, Sep 13, 2022

Changes:
  • Fix server version parsing for versions with only major or major and minor version numbers.
  • Update build environment and language level to Java 11. This means earlier versions of Java are no longer supported! This should cause no issues as underlying server software has dropped support for earlier versions as well. Furthermore, Java 8 is ancient and no longer maintained.
----------, Jun 25, 2021

Changes:
  • Add config option 'world_whitelist' to restrict checks to certain worlds only. This can be useful if you want to restrict the plugins functionally to creative worlds only.
  • Add config option 'permitted_content' to whitelist certain content. For example, you could allow links to your own server website or certain commands such as '/help' for introduction books. This list supports '*' as a wild card for fuzzy string matching.
  • Add override permission 'bookexploitfix.exempt' to allow creation of books with special content. Note that this only applies to book creation, not reading and is therefore only useful when disabling the read check. There is no read override since players with OP/all permissions should especially be protected from accidentally executing commands.
For detailed information and examples of the new config options check the example config file: https://github.com/minoneer/BookExploitFix/blob/master/src/main/resources/config.yml
----------, Jan 12, 2021

General:
This is a complete rewrite of the plugin against the Spigot API which was made available since the plugins original release. This will significantly improve maintainability moving forwards, especially forward compatibility to newer Minecraft versions. The focus of this plugin also shifted towards creative mode servers, since the exploit has been fixed for survival.

Note:
The plugin supports Spigot/Paper servers for Minecraft version 1.13 and later. For full functionality, ProtocolLib is required. Please also check the updated plugin description: https://www.spigotmc.org/resources/bookexploitfix.5897/

The configuration file format has changed significantly to make it clearer and easier to configure. Please delete the old file and let the plugin generate a new version. See here for more information on the new format: https://github.com/minoneer/BookExploitFix/blob/master/src/main/resources/config.yml

Changes:
  • Complete rewrite of the filtering functions against the Spigot API
  • Improved support for creative mode players via ProtocolLib
  • Lectern support for servers with Minecraft version1.14 or higher
  • Open sourced code at https://github.com/minoneer/BookExploitFix
----------, Dec 29, 2020

1.15 Update

* add support for craftbukkit/spigot version 1.15 (v1_15_R1)

See the plugin description to check if you still need this plugin
----------, Dec 11, 2019

1.14.4 Update
  • add support for craftbukkit/spigot version 1.14.4 (v1_14_R1_B).
See the plugin description to check if you still need this plugin
----------, Aug 11, 2019

REAL 1.14 Update
  • really add support for craftbukkit/spigot version 1.14 (v1_14_R1). The previous version was missing the new module.
See the plugin description to check if you still need this plugin
----------, May 7, 2019

REAL 1.14 Update
  • really add support for craftbukkit/spigot version 1.14 (v1_14_R1). The previous version was missing the new module.
See the plugin description to check if you still need this plugin
----------, May 6, 2019

1.14 Update
  • add support for craftbukkit/spigot version 1.14 (v1_14_R1)
See the plugin description to check if you still need this plugin

Does not actually support 1.14, use verson 0.13 instead ( https://www.spigotmc.org/resources/bookexploitfix.5897/update?update=276325 instead)
----------, May 6, 2019

1.13.1 Update

* add support for craftbukkit/spigot version 1.13.1 (v1_13_R2)

See the plugin description to check if you still need this plugin
----------, Aug 31, 2018

Logging Improvements
  • Limit message length to 1500 characters when logging book conten
See the plugin description to check if you still need this plugin
----------, Aug 18, 2018

1.13 Update
  • add support for craftbukkit/spigot version 1.13 (v1_13_R1)
See the plugin description to check if you still need this plugin
----------, Jul 23, 2018

1.12 Update
  • add support for craftbukkit/spigot version 1.12-pre (v1_12_R1)
See the plugin description to check if you still need this plugin
----------, May 24, 2017

Big Version-Update
  • add support for craftbukkit/spigot version 1.11-1.11.2 (v1_11_R1)
  • add support for craftbukkit/spigot version 1.10-1.10.2 (v1_10_R1)
  • add support for craftbukkit/spigot version 1.9.4 (v1_9_R2)
  • add support for craftbukkit/spigot version 1.9-1.9.2 (v1_9_R1)
  • remove the TWITCH_USER_INFO action from default values (was removed in MC 1.9)
See this post for the reasons behind the update
----------, Apr 5, 2017

Compatibility update

Changelog
  • added compatibility to craftbukkit/spigot 1.8.4-1.8.7
Edit: Disregard the 0.3 in the update title - it's a typo and supposed to say 0.6
----------, May 17, 2015

Minor Improvements Update

Changelog
  • added player UUID to logging output
----------, Apr 16, 2015

Bug Fixes Update

Changelog
  • removed checking of writable books (book and quill) as their pages are not saved as JSON strings. This also fixes errors when someone closes a writable book with trailing white spaces (reported here)
  • added config option to ouput additional debug logging
----------, Apr 13, 2015

Compatibility update

Changelog
  • added backwards compatibility to craftbukkit/spigot 1.8
  • fixed class import to actually also work with craftbukkit (not just spigot)
----------, Apr 12, 2015

Critical update

Changelog
  • improved book filtering to find nested chat components
  • fixed a few possible NPE
----------, Apr 12, 2015

Resource Information
Author:
----------
Total Downloads: 10,445
First Release: Apr 11, 2015
Last Update: May 12, 2024
Category: ---------------
All-Time Rating:
30 ratings
Version -----
Released: --------------------
Downloads: ------
Version Rating:
----------------------
-- ratings