Uploaded image for project: 'Minecraft (Bedrock codebase)'
  1. Minecraft (Bedrock codebase)
  2. MCPE-115323

You can write raw text components on signs even in survival/cheats disabled

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • None
    • 1.19.10.20 Preview, 1.17.30.24 Beta, 1.17.11 Hotfix, 1.17.0.54 Beta, 1.16.201 Hotfix, 1.16.221 Hotfix, 1.18.31
    • None
    • Confirmed
    • Windows
    • 46816

      The bug

      Survival players can write raw JSON text components into signs, and they are interpreted. This exposes game internals that should be reserved for players with cheats, similar to MCPE-92635

      How to reproduce

      1. Enter a world with cheats disabled in survival mode
      2. Place a sign
      3. Type in this:

      {"rawtext":[{"translate":"gameTip.openInventory.touch"}]}
      

      The sign says "Tap the :tip_touch_inventory: button to open your inventory"

      Raw translation string IDs, especially unformatted ones, should not be exposed/accessible in survival mode.

      Expected behavior

      Sign shows exactly what was typed into it, unless you were in creative mode/had cheats enabled.

        1. magic_rawtext_17082022_120057.mp4
          8.35 MB
          Dylan Magar
        2. screenshot-1.png
          55 kB
          [Mod] tryashtar
        3. Screenshot 2022-08-16 211512.png
          630 kB
          Dylan Magar

            tryashtar [Mod] tryashtar
            Votes:
            9 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              CHK: