From 27d518d782ca8170256e17caa6d29fbf73d7551d Mon Sep 17 00:00:00 2001 From: John <63141077+AconiteX@users.noreply.github.com> Date: Sun, 30 May 2021 00:52:47 -0400 Subject: [PATCH] Created List of Known Exploit Fixes (markdown) --- List-of-Known-Exploit-Fixes.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 List-of-Known-Exploit-Fixes.md diff --git a/List-of-Known-Exploit-Fixes.md b/List-of-Known-Exploit-Fixes.md new file mode 100644 index 0000000..ede783a --- /dev/null +++ b/List-of-Known-Exploit-Fixes.md @@ -0,0 +1,7 @@ +* ([e5c9ef5b](https://github.com/SWG-Source/client-tools/commit/e5c9ef5b55d350f5226d7ae573656d71682db107) (later adjusted via [e5536f68](https://github.com/SWG-Source/client-tools/commit/e5536f6837d26f66f8bfa28f8cf08a903f20b8c7)) Fixes an exploit that allows a player to loop using the /examine command and speed hack accelerate their movement. +* ([fb0b6407](https://github.com/SWG-Source/dsrc/commit/fb0b6407434773532767ba4b8b108373db5a5725)) Fixes an exploit that allows any Jedi Profession to request a robe from a Force Shrine if they don't have one in their inventory. The common exploit tactic involved requesting a robe, selling to a junk dealer, and repeating. +* ([0b7ba4c7](https://github.com/SWG-Source/src/commit/0b7ba4c7fc1aea5dab674fe1dc0c4c9fe316a157)) Disallows auctioning an item that isn't contained by a player to fix an exploit that allowed players to sell an item to the Bazaar and a Junk Dealer in close succession. +* ([d9ff25d0](https://github.com/SWG-Source/src/commit/d9ff25d06f65a63b56b963a347fd5a1c13a1d54a)) Fixes an exploit that sometimes allowed non-admin players to execute certain console admin commands. +* ([e1268bc8](https://github.com/SWG-Source/src/commit/e1268bc8a6cd81b0f59c0f9ae248edcec8f4afa2)) Corrects a bug that could be exploited to get behind certain collidable objects. +* ([36785b34](https://github.com/SWG-Source/src/commit/36785b3451d4ad27a7571c63f347c7b49f4a8995)) Adjusts how isGod checks are validated for additional security around parsing admin commands. +* ([b81ee4db](https://github.com/SWG-Source/src/commit/b81ee4db741380a04e9932c1818da18d569926b7) (later adjusted via [39d77b6f](https://github.com/SWG-Source/src/commit/39d77b6f72a62416afb38d39d56cebcdcf82cfa6)) Forcefully disconnects clients which attempt to send unauthorized controller messages to prevent unintended communication.