Can bypass regions with mob spawn egg when used on water.

Open
#2,000 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
java
Domain
authorization

Research direction

The issue names no source files or tests. First reproduce the bypass on Paper 1.19.4 with WorldGuard 7.0.8 and WorldEdit 7.2.15, then trace region-protection handling for spawn eggs aimed at water. Done means the spawn egg is blocked when used in a protected region, regardless of aim angle, without relying on the breaking configuration workaround.

Written by the indexing model from the issue text.

Description

status:accepted status:upstream type:bug
WorldEdit Version

Bukkit-Official(7.2.15-SNAPSHOT+6372-93c0d36)

WorldGuard Version

Bukkit-Official (7.0.8-SNAPSHOT+2231-bddfbdd)

Platform Version

Paper 1.19.4 Build 514

Confirmations
  • I am using the most recent Minecraft release.
  • I am using a version of WorldEdit compatible with my Minecraft version.
  • I am using a version of WorldGuard compatible with my Minecraft version.
  • I am using the latest or recommended version of my platform software.
  • I am NOT using a hybrid server, e.g. a server that combines Bukkit and Forge. Examples include Arclight, Mohist, and Cardboard.
  • I am NOT using a fork of WorldEdit, such as FastAsyncWorldEdit (FAWE) or AsyncWorldEdit (AWE)
Bug Description

When inside a region you do not have access to, aiming at water, at just the right angle, so your client isn't selecting any block behind the water, as such: (https://i.imgur.com/uIA0HbX.png) as opposed to as such: (https://i.imgur.com/7MzAUji.png) you are able to bypass region protection, and place mob spawn eggs, spawning the mob.

Expected Behavior

Respect region protection and do not allow item usage if not part of the region, regardless of how your client is aimed.

Reproduction Steps
  1. Create region.
  2. Use a typical spawn egg, such as a cow spawn egg.
  3. Aim at water as shown in first screenshot in Bug Description section.
  4. Right click to place mob bypassing protection.
Optional WorldGuard-Report

No response

Anything Else?

Using block-entity-spawns-with-untraceable-cause: true - is a temporary solution, however this breaks a wide variety of other entity spawn related things on the server, to the point where running this setting on true is simply game-breaking.

Dominant language
Java
Stars
939
Forks
672
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from EngineHub/WorldGuard

All issues in EngineHub/WorldGuard

Similar issues

More Java issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.