kaboomserver/extras
1
0
Fork 1
mirror of https://github.com/kaboomserver/extras.git synced 2024-11-23 16:08:18 -05:00
Code Issues Projects Releases Packages Wiki Activity

Patch execute bypass (#320)

Browse source
This commit is contained in:
Allink 2022-08-13 16:26:59 +01:00 committed by GitHub
parent 1ebcae5e0c
commit 08f75cb374
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
src/main/java/pw/kaboom/extras/modules/server/ServerCommand.java
View file

@ -47,8 +47,18 @@ public final class ServerCommand implements Listener {
|| "w".equalsIgnoreCase(cmd) || "w".equalsIgnoreCase(cmd)
); );
} }
public static String checkCommand(final CommandSender sender, final String command, public static String checkCommand(final CommandSender sender, final String command,
final boolean isConsoleCommand) { final boolean isConsoleCommand) {
return checkCommand(sender, command, isConsoleCommand, 1);
}
public static String checkCommand(final CommandSender sender, final String command,
final boolean isConsoleCommand, int depth) {
if (depth > 50) {
return "cancel";
}
final String[] arr = command.split(" "); final String[] arr = command.split(" ");
String commandName = arr[0].toLowerCase(); String commandName = arr[0].toLowerCase();
@ -102,9 +112,9 @@ public final class ServerCommand implements Listener {
final String[] executeCommand = Arrays.copyOfRange( final String[] executeCommand = Arrays.copyOfRange(
arr, i + 1, arr.length); arr, i + 1, arr.length);
String result = checkCommand(sender, String result = checkCommand(sender,
String.join(" ", executeCommand), true); String.join(" ", executeCommand), true, depth + 1);
if (result == null) { if (result == null) {
break; continue;
} }
switch (result) { switch (result) {
case "cancel": case "cancel":
@ -112,7 +122,8 @@ public final class ServerCommand implements Listener {
default: default:
String pureExecute = String.join( String pureExecute = String.join(
" ", Arrays.copyOfRange(arr, 0, i + 1)); " ", Arrays.copyOfRange(arr, 0, i + 1));
return (pureExecute + " " + result); return checkCommand(sender, pureExecute + " " + result,
isConsoleCommand, depth + 1);
} }
} }
} }