Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Important] Serious Possible Abuse #79

Open
JXSnack opened this issue Aug 11, 2024 · 1 comment
Open

[Important] Serious Possible Abuse #79

JXSnack opened this issue Aug 11, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@JXSnack
Copy link

JXSnack commented Aug 11, 2024

Issue
There’s a significant problem at the moment: anyone can upload any content. While this might not seem problematic initially, it opens the door for someone to upload illegal or harmful material, like "cheese pizza." If others unknowingly come into proximity with such content, it would be automatically downloaded to their devices, potentially putting them at risk of being flagged by authorities or worse. Although it's the responsibility of the server administrator to prevent such content from being uploaded, the way the mod currently operates makes it nearly impossible to enforce this.

Solution
The local caching system is useful, but it should be designed to automatically clear itself when the player leaves a server (or world). Only the files that the user has personally uploaded should remain. There could be a configuration option to disable this behavior, but by default, the cache should be cleared upon disconnection.

I run a pretty large server and this is becoming a big problem.

@JXSnack JXSnack added the bug Something isn't working label Aug 11, 2024
@Luke100000
Copy link
Owner

I will check regarding a flag, though it won't be enabled by default. The cache is here for a reason. You will also encounter the same problem with logs, cached chunks, cached player skins, etc.
If you want to reduce the risk as a server admin, reduce the valid resolution to pixel art and disable showOtherPlayersPaintings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants