From 56ad239cbca1f05c9b02a6a25b8c30735e8f0d08 Mon Sep 17 00:00:00 2001 From: Len <40720638+destro174@users.noreply.github.com> Date: Sun, 19 Jun 2022 11:58:53 +0200 Subject: [PATCH] validate names when trusting players --- .../java/me/ryanhamshire/GriefPrevention/GriefPrevention.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/main/java/me/ryanhamshire/GriefPrevention/GriefPrevention.java b/src/main/java/me/ryanhamshire/GriefPrevention/GriefPrevention.java index f06ab2f..771f926 100644 --- a/src/main/java/me/ryanhamshire/GriefPrevention/GriefPrevention.java +++ b/src/main/java/me/ryanhamshire/GriefPrevention/GriefPrevention.java @@ -2589,6 +2589,10 @@ public class GriefPrevention extends JavaPlugin String permission = null; OfflinePlayer otherPlayer = null; UUID recipientID = null; + if (!recipientName.matches("^\\w{3,16}$")) { + GriefPrevention.sendMessage(player, TextMode.Err, Messages.PlayerNotFound2); + return; + } if (recipientName.startsWith("[") && recipientName.endsWith("]")) { permission = recipientName.substring(1, recipientName.length() - 1);