14545 Commits

Author SHA1 Message Date
Dylan K. Taylor
94c4f58667
Fixed bogus test 2022-01-21 19:13:36 +00:00
Dylan K. Taylor
c10eda5eae
InGamePacketHandler: limit depth of form responses to 2
form responses should only contain string|int|float|bool|null. Arrays or objects appearing in here are likely malicious.
2022-01-21 19:11:58 +00:00
Dylan K. Taylor
ed312863a7
ignore phpstan bug 2022-01-21 18:43:53 +00:00
Dylan K. Taylor
387c13beff
InGamePacketHandler: fixed invalid JSON being treated as form close 2022-01-21 18:32:58 +00:00
Dylan K. Taylor
56fe71d939
InGamePacketHandler: fixed crash in form handling when invalid JSON is given 2022-01-21 17:34:13 +00:00
Dylan K. Taylor
061d851fbd
World: do not update entities which have been flagged for despawn
fixes #4718
2022-01-20 16:27:21 +00:00
Dylan K. Taylor
a67aef0477
PlayerInteractEvent: updated documentation 2022-01-20 16:10:37 +00:00
Dylan K. Taylor
858024afb7
Remove useless docs noticed by php-cs-fixer 3.5 2022-01-18 00:24:12 +00:00
Dylan K. Taylor
eaaf00ca2b
Merge branch 'stable' of github.com:pmmp/PocketMine-MP into stable 2022-01-18 00:23:39 +00:00
Dylan K. Taylor
f1723acfd3
UnsafeForeachArrayOfStringRule: use statically analysable function reference
this will ensure that it get automatically updated during refactors.
2022-01-18 00:23:29 +00:00
Dylan K. Taylor
8da27ea0aa
UnsafeForeachArrayOfStringRule: fixed outdated function name 2022-01-18 00:15:44 +00:00
dependabot[bot]
388622d55d
Bump pocketmine/locale-data from 2.3.0 to 2.3.33 (#4735)
Bumps [pocketmine/locale-data](https://github.com/pmmp/Language) from 2.3.0 to 2.3.33.
- [Release notes](https://github.com/pmmp/Language/releases)
- [Commits](https://github.com/pmmp/Language/compare/2.3.0...2.3.33)

---
updated-dependencies:
- dependency-name: pocketmine/locale-data
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-17 20:46:38 +00:00
Leo Lee
9f4fcfafdb
Fixed some incorrect block breaking times (#4723) 2022-01-16 20:57:16 +00:00
Dylan K. Taylor
6679c53e56
BrewingStand: fixed collision box 2022-01-15 16:41:27 +00:00
Dylan K. Taylor
9d061e86af
4.0.7 is next 2022-01-13 21:46:30 +00:00
Dylan K. Taylor
f7d25f251e
Release 4.0.6 4.0.6 2022-01-13 21:46:30 +00:00
Dylan K. Taylor
0ccb47fb07
make-release: trap more errors 2022-01-13 21:46:06 +00:00
Dylan K. Taylor
0973472842
actions: bump to 8.0.14 2022-01-13 21:23:23 +00:00
Dylan K. Taylor
f126479c37
InGamePacketHandler: check the validity of facing values given by the client 2022-01-13 21:21:15 +00:00
dependabot[bot]
d34f4b28b3
Bump pocketmine/binaryutils from 0.2.3 to 0.2.4 (#4726)
Bumps [pocketmine/binaryutils](https://github.com/pmmp/BinaryUtils) from 0.2.3 to 0.2.4.
- [Release notes](https://github.com/pmmp/BinaryUtils/releases)
- [Commits](https://github.com/pmmp/BinaryUtils/compare/0.2.3...0.2.4)

---
updated-dependencies:
- dependency-name: pocketmine/binaryutils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-13 14:21:32 +00:00
Dylan K. Taylor
8a65fd273a
Updated RakLib to 0.14.3 2022-01-10 22:29:38 +00:00
Dylan K. Taylor
248cc0ef49
actions: colorize diff output on CS failure 2022-01-10 22:06:07 +00:00
Dylan K. Taylor
d1726aa20c
CS: use fully_qualified_strict_types 2022-01-10 21:41:56 +00:00
Jack Honour
58e1e7bd6f
Worker: fixed missing AsyncTask import for documentation (#4719)
OCD from f5c9c02e09f54b53ed4c495c8a0000b54930ccef
2022-01-10 15:12:37 +00:00
Dylan K. Taylor
0a5b146189
substr() returns an empty string instead of false in 8.0
an empty string will pass through preg_match_all() without any harmful effects, so we don't need to check for it.
2022-01-07 22:38:00 +00:00
Dylan K. Taylor
b4e1871899
Updated PHPStan baseline 2022-01-07 21:49:49 +00:00
Dylan K. Taylor
78eaa0993d
Merge branch 'legacy/pm3' into stable 2022-01-07 21:48:28 +00:00
Dylan K. Taylor
bee2aba813
Updated PHPStan baseline 2022-01-07 21:46:35 +00:00
Dylan K. Taylor
af81f80cf3
Updated PHPStan 2022-01-07 21:45:35 +00:00
Dylan K. Taylor
43c5d08042
Merge branch 'stable' of github.com:pmmp/PocketMine-MP into stable 2022-01-07 20:15:30 +00:00
Dylan K. Taylor
6d249026cc
Merge branch 'legacy/pm3' into stable 2022-01-07 20:15:15 +00:00
Dylan K. Taylor
ed2145b6a4
php-cs-fixer: enforce EOF newlines 2022-01-07 20:12:21 +00:00
dependabot[bot]
3e6c157217
Bump phpstan/phpstan from 1.3.1 to 1.3.3 (#4712)
Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan) from 1.3.1 to 1.3.3.
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/master/CHANGELOG.md)
- [Commits](https://github.com/phpstan/phpstan/compare/1.3.1...1.3.3)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-07 15:20:33 +00:00
Dylan T
86beeb8255
readme: update badge links
[ci skip]
2022-01-06 17:11:03 +00:00
dependabot[bot]
230a3c9839
Bump phpstan/phpstan from 1.2.0 to 1.3.1 (#4702)
Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan) from 1.2.0 to 1.3.1.
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/master/CHANGELOG.md)
- [Commits](https://github.com/phpstan/phpstan/compare/1.2.0...1.3.1)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-05 13:49:29 +00:00
Dylan K. Taylor
35f205b476
4.0.6 is next 2022-01-04 20:51:37 +00:00
Dylan K. Taylor
e7d17eb4d3
Release 4.0.5 4.0.5 2022-01-04 20:51:36 +00:00
Dylan K. Taylor
73168a0e39
Merge branch 'legacy/pm3' into stable 2022-01-04 20:49:32 +00:00
Dylan K. Taylor
e8893dd91f
3.26.6 is next 2022-01-04 20:47:31 +00:00
Dylan K. Taylor
a4af1609ea
Release 3.26.5 3.26.5 2022-01-04 20:47:31 +00:00
Dylan K. Taylor
8c4b8a9042
CS 2022-01-04 20:44:10 +00:00
Dylan T
6492cac5c1
Merge pull request from GHSA-c6fg-99pr-25m9 2022-01-04 20:40:55 +00:00
Dylan T
958a9dbf0f
Merge pull request from GHSA-c6fg-99pr-25m9
* Skin: impose length limits on skinID, geometryName and geometryData fields

* Skin: remove extra newline
2022-01-04 20:40:55 +00:00
Dylan T
3ed57ce49a
Merge pull request from GHSA-p62j-hrxm-xcxf
This checks the following things:
- Validity of UTF-8 encoding of title, author, and page content
- Maximum soft and hard lengths of title, author, and page content (soft
  limits may be bypassed by uncancelling PlayerEditBookEvent; hard
  limits may not be bypassed)
- Maximum number of pages. Books with more than 50 pages may still be
  edited, but may not have new pages added.
2022-01-04 20:39:02 +00:00
Dylan T
68f3399cfd
Merge pull request from GHSA-p62j-hrxm-xcxf
This checks the following things:
- Validity of UTF-8 encoding of title, author, and page content
- Maximum soft and hard lengths of title, author, and page content (soft
  limits may be bypassed by uncancelling PlayerEditBookEvent; hard
  limits may not be bypassed)
- Maximum number of pages. Books with more than 50 pages may still be
  edited, but may not have new pages added.
2022-01-04 20:39:02 +00:00
Covered123
aeab19a616
Fixed world spawn point not updating to players (#4699)
closes #4383
2022-01-04 20:31:27 +00:00
Dylan K. Taylor
7bee72ef2d
Use ~ instead of ^ for constraints on BedrockData and BedrockProtocol
I got these two mixed up - they are exactly the opposite of what I thought. ~ is the stricter operator.
2022-01-04 00:54:09 +00:00
Dylan K. Taylor
0d595e4324
Update Language dependency 2022-01-04 00:47:04 +00:00
Dylan K. Taylor
e43e0189df
InGamePacketHandler: do not pass bare integers from BookEditPacket directly into event
while these currently happen to be identical, they may not be in the future.

Really this should be represented by an enum.
2022-01-03 20:20:32 +00:00
Dylan K. Taylor
decd1da2d0
BaseSign: remove dead TODO comment 2022-01-03 19:33:03 +00:00