no idea how they managed to dispatch player command without / but ok

.github/FUNDING.yml

@@ -0,0 +1,12 @@
+# These are supported funding model platforms
+
+github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: YouHaveTrouble
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

.github/workflows/buildjar.yml

@@ -0,0 +1,36 @@
+name: Build CommandWhitelist Jar
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Git repo
+        uses: actions/checkout@v1
+      - name: Restore Maven cache
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+      - name: Set up JDK 1.8
+        uses: actions/setup-java@v1
+        with:
+          java-version: 1.8
+      - name: Build with Maven
+        run: mvn package --file pom.xml
+      - name: Copy artifacts
+        uses: actions/upload-artifact@master
+        with:
+          name: CommandWhitelist
+          path: target/CommandWhitelist*.jar

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>eu.endermite</groupId>
     <artifactId>CommandWhitelist</artifactId>
-    <version>1.7.1</version>
+    <version>1.7.4</version>
     <packaging>jar</packaging>
 
     <name>CommandWhitelist</name>
@@ -84,7 +84,7 @@
         <dependency>
             <groupId>org.spigotmc</groupId>
             <artifactId>spigot-api</artifactId>
-            <version>1.16.3-R0.1-SNAPSHOT</version>
+            <version>1.16.5-R0.1-SNAPSHOT</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
@@ -108,7 +108,7 @@
         <dependency>
             <groupId>com.comphenix.protocol</groupId>
             <artifactId>ProtocolLib</artifactId>
-            <version>4.5.0</version>
+            <version>4.6.0</version>
             <scope>provided</scope>
         </dependency>
     </dependencies>

readme.md

@@ -1,6 +1,9 @@
 Command  Whitelist is a plugin that allows you to control 
 precisely what commands players can see and use.
 
+<img src="https://img.shields.io/bstats/servers/8705?label=Spigot%20servers%20using%20CommandWhitelist&style=for-the-badge">
+<img src="https://img.shields.io/bstats/servers/8704?label=Proxy%20servers%20using%20CommandWhitelist&style=for-the-badge">
+
 <h3>Plugin Features</h3>
 
 <ul>

src/main/java/eu/endermite/commandwhitelist/spigot/CommandWhitelist.java

@@ -28,15 +28,16 @@ public class CommandWhitelist extends JavaPlugin {
 
         Plugin protocollib = getServer().getPluginManager().getPlugin("ProtocolLib");
 
-        getServer().getPluginManager().registerEvents(new PlayerCommandSendListener(), this);
+        getServer().getPluginManager().registerEvents(new PlayerCommandPreProcessListener(), this);
         if (!isLegacy) {
             if (!getConfigCache().isUseProtocolLib() || protocollib == null || !protocollib.isEnabled()) {
-                getServer().getPluginManager().registerEvents(new PlayerCommandPreProcessListener(), this);
+
+                getServer().getPluginManager().registerEvents(new PlayerCommandSendListener(), this);
             } else {
                 PacketCommandSendListener.protocol(this);
                 getLogger().info(ChatColor.AQUA+"Using ProtocolLib for command filter!");
             }
-
+            getServer().getPluginManager().registerEvents(new TabCompleteBlockerListener(), this);
         } else {
             getLogger().info(ChatColor.AQUA+"Running in legacy mode...");
             if (protocollib != null) {
@@ -46,8 +47,6 @@ public class CommandWhitelist extends JavaPlugin {
             }
         }
 
-        getServer().getPluginManager().registerEvents(new TabCompleteBlockerListener(), this);
-
         getCommand("commandwhitelist").setExecutor(new MainCommand());
         getCommand("commandwhitelist").setTabCompleter(new MainCommand());
 

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/PlayerCommandPreProcessListener.java

@@ -19,16 +19,18 @@ public class PlayerCommandPreProcessListener implements Listener {
         if (player.hasPermission("commandwhitelist.bypass"))
             return;
         String command = event.getMessage().toLowerCase();
+        if (command.startsWith("/"))
+            command = command.substring(1);
         for (Map.Entry<String, List<String>> s : CommandWhitelist.getConfigCache().getPermList().entrySet()) {
             if (!player.hasPermission("commandwhitelist.commands." + s.getKey()))
                 continue;
             for (String comm : s.getValue()) {
                 comm = comm.toLowerCase();
-                if (command.equalsIgnoreCase("/" + comm) || command.startsWith("/" + comm + " ")) {
+                if (command.equalsIgnoreCase(comm) || command.startsWith(comm + " ")) {
                     String rawCmd = event.getMessage();
                     List<String> bannedSubCommands = CommandsList.getSuggestions(player);
                     for (String bannedSubCommand : bannedSubCommands) {
-                        if (rawCmd.startsWith("/"+bannedSubCommand)) {
+                        if (rawCmd.startsWith(bannedSubCommand)) {
                             event.setCancelled(true);
                             ConfigCache config = CommandWhitelist.getConfigCache();
                             player.sendMessage(ChatColor.translateAlternateColorCodes('&', config.getPrefix() + RandomStuff.getMessage(config.getCommandDeniedList(), config.getSubCommandDenied())));