From e02db613147091d9792c1eec9bb7d62ed98d48e3 Mon Sep 17 00:00:00 2001 From: "Pantera (Mad_Daniel)" <89838384+Pantera07@users.noreply.github.com> Date: Tue, 16 May 2023 00:37:47 +0900 Subject: [PATCH] Book exploits --- readme.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/readme.md b/readme.md index 2424e7c..4f11a0b 100644 --- a/readme.md +++ b/readme.md @@ -28,6 +28,30 @@ entities: tick: false ``` +### Book exploits + +Books are a common target for exploitation techniques, and have been used for all sorts of nasty things in the past including duplication exploits, crash exploits, and forcing servers to run out of memory while producing massive amounts of chunk data. + +#### Option 1 + +Moderately reducing page-max can mitigate 'book exploit' without affecting vanilla clients. + +`paper-global.yml` +```yaml +item-validation: + book-size: + page-max: 1024 +``` + +#### Option 2 + +Disabling the book completely prevents the 'book exploit', but prevents players from writing to the book. + +`pufferfish.yml` +```yaml +enable-books: false +``` + ### Collision lag machines This exploit is similar to the armor stand one, but instead of armor stands, it uses entities that can be pushed by