GH-406 fix: audit findings - #406

Open

Jakubk15 wants to merge 17 commits into

masterfrom

fix/audit-findings

Commits on Jul 4, 2026

fix: remove duplicate PlaceBlockBlocker registration

Jakubk15
and
claude
committed
7bafa8e
fix: continue instead of return on expired combat tag

Jakubk15
and
claude
committed
e7d0eec
fix: enforce headDropOnlyInCombat for player head drops

Jakubk15
and
claude
committed
f07e5e2
fix: guard against offline player in TridentController.onUntag

Jakubk15
and
claude
committed
80adc99
fix: do not throw on offline tagged player in knockback onTag

Jakubk15
and
claude
committed
0173594
fix: spawn death-flare particles on sync scheduler

Jakubk15
and
claude
committed
a69bc11
fix: drop overflow items instead of losing them on respawn

Jakubk15
and
claude
committed
baff6b9
fix: make removeRandomItems safe and progress-guaranteed

Jakubk15
and
claude
committed
6b53c40
fix: remove TOCTOU NPE window in isInCombat

Jakubk15
and
claude
committed
bedb241
fix: close namespaced/padded command bypass in CommandsBlocker

Jakubk15
and
claude
committed
04d01d7
fix: evict expired tag-out entries via self-expiring cache

Jakubk15
and
claude
committed
7747bfb
fix: parenthesize pearl cooldown tick conversion

Jakubk15
and
claude
committed
a36af22
fix: avoid half-applied tag and dead code in tagMultiple

Jakubk15
and
claude
committed
02040c3
fix: drop respawn leftovers at the respawn location

Jakubk15
and
claude
committed
6876a2d
fix: do not untag already-in-combat player on tagMultiple rollback

Jakubk15
and
claude
committed
7e484c2
fix: guard against null slots in removeRandomItems

Jakubk15
and
claude
committed
51a0bed

Commits on Jul 10, 2026

Respect namespace when checking restricted commands

Jakubk15
and
Copilot
committed
e3b81e0

Navigation Menu

Uh oh!

Uh oh!

GH-406 fix: audit findings - #406

GH-406 fix: audit findings#406
Jakubk15 wants to merge 17 commits into
masterfrom
fix/audit-findings

Commits on Jul 4, 2026

fix: remove duplicate PlaceBlockBlocker registration

fix: continue instead of return on expired combat tag

fix: enforce headDropOnlyInCombat for player head drops

fix: guard against offline player in TridentController.onUntag

fix: do not throw on offline tagged player in knockback onTag

fix: spawn death-flare particles on sync scheduler

fix: drop overflow items instead of losing them on respawn

fix: make removeRandomItems safe and progress-guaranteed

fix: remove TOCTOU NPE window in isInCombat

fix: close namespaced/padded command bypass in CommandsBlocker

fix: evict expired tag-out entries via self-expiring cache

fix: parenthesize pearl cooldown tick conversion

fix: avoid half-applied tag and dead code in tagMultiple

fix: drop respawn leftovers at the respawn location

fix: do not untag already-in-combat player on tagMultiple rollback

fix: guard against null slots in removeRandomItems

Commits on Jul 10, 2026

Respect namespace when checking restricted commands