Uploaded image for project: 'Minecraft: Java Edition'
  1. Minecraft: Java Edition
  2. MC-121739

Normal players can use player selectors in /msg command

    XMLWordPrintable

    Details

    • Confirmation Status:
      Confirmed

      Description

      The bug

      Since 17w45a's command update, non-op players can use selectors in the /msg command as recipient and in the message. This appears to be the only affected command.

      This allows disconnecting other players if the message exceeds the maximum length of a string in a packet.

      Also note that a survival player can now simply run /msg @s @e to view all entities, quantify their search with selector arguments, etc. Obviously a non-operator should not have access to this information.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                boq [Mojang] Bartosz Bok
                Reporter:
                pokechu22 [Mod] Pokechu22
              • Votes:
                9 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  CHK: