Potential security issue

[ghost]

SkyBlock/src/main/java/me/thomas/skyblock/events/OpenItemsInventories.java

Line 16 in e364fb5

if (!event.getView().getTitle().contains("SkyBlock Items")) return;

Checking event.getView().getTitle() to see whether your custom inventory is being used is unsafe, as renaming a chest in an anvil allows users to set their own inventory titles. The correct way to check if your custom inventory is involved with an event is by using custom holders, see here: https://docs.papermc.io/paper/dev/custom-inventory-holder

[Thomassc10]

Hey, thanks for tip, I wasn't aware of that. This is kinda of an abandoned project tho, I haven't been coding plugins for a while now and I don't think I'll get back to it. Just out of curiosity, how did you find this repository? Sorry for the delay btw