diff --git a/readme.md b/readme.md index 2424e7c..4f11a0b 100644 --- a/readme.md +++ b/readme.md @@ -28,6 +28,30 @@ entities: tick: false ``` +### Book exploits + +Books are a common target for exploitation techniques, and have been used for all sorts of nasty things in the past including duplication exploits, crash exploits, and forcing servers to run out of memory while producing massive amounts of chunk data. + +#### Option 1 + +Moderately reducing page-max can mitigate 'book exploit' without affecting vanilla clients. + +`paper-global.yml` +```yaml +item-validation: + book-size: + page-max: 1024 +``` + +#### Option 2 + +Disabling the book completely prevents the 'book exploit', but prevents players from writing to the book. + +`pufferfish.yml` +```yaml +enable-books: false +``` + ### Collision lag machines This exploit is similar to the armor stand one, but instead of armor stands, it uses entities that can be pushed by