Skip to content

New Release#536

Open
tastybento wants to merge 5 commits into
masterfrom
develop
Open

New Release#536
tastybento wants to merge 5 commits into
masterfrom
develop

Conversation

@tastybento

Copy link
Copy Markdown
Member

No description provided.

tastybento and others added 5 commits July 3, 2026 11:53
…ca2dcd1

ci: bump pinned publish-platforms.yml to ca2dcd1
#534)

Jobs Reborn awards block-break rewards from a BlockBreakEvent handler at
EventPriority.HIGHEST with ignoreCancelled=true. AOneBlock also only checked
the MAGIC_BLOCK protection flag (and cancelled the break) at HIGHEST. Within a
single priority slot, Bukkit fires handlers in plugin-registration order, which
is nondeterministic. When Jobs ran before AOneBlock, it paid out before the
break was cancelled; since the magic block respawns on a cancelled break, a
player lacking the MAGIC_BLOCK flag could mine it endlessly for infinite rewards.

Add a dedicated onBlockBreakDeny handler at EventPriority.LOWEST that runs the
MAGIC_BLOCK flag check (which cancels the event on denial). Cancelling at LOWEST
is strictly before any later ignoreCancelled=true handler, so reward plugins are
skipped for denied breaks. Full magic-block processing stays at HIGHEST, and
allowed breaks are unaffected.

Bump version to 1.25.2.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nxjWg93etdoy6U6nhTXRX
…d S8924)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nxjWg93etdoy6U6nhTXRX
…ity-534

fix: cancel denied magic-block break early to stop Jobs reward exploit (#534)
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant