Uploaded image for project: 'Minecraft: Java Edition'
  1. Minecraft: Java Edition
  2. MC-114464

/tellraw security issue

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Resolution: Duplicate
    • Affects Version/s: Minecraft 1.11.2, Minecraft 17w06a
    • Fix Version/s: None
    • Labels:
      None
    • Confirmation Status:
      Unconfirmed

      Description

      Doing

      /tellraw (selector) []

      will kick them with a big long message:

      Internal Exception: io.netty.handler.codec.DecoderException: com.google.JsonSyntaxException:
      com.google.gson.stream.MalformedJsonException: Use JsonReader.setLenient(true) to accept malformed JSON at line 1 column 1

      This works with any other array of square brackets, ex.

      [[]]

      Now, this can be exploited by using a Repeating Command Block to do

      /tellraw @a []

      , effectively denying anyone from joining a server/realm/world.

      This doesn't work with curly brackets, as it says "Invalid json: ".

      The only good use for this is to give Realm owners a limited version of

      /kick

      to kick spamming players from the server.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                TheMuffinPony TheMuffinPony
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: