This reduces the impact of attacks that send a large packet size first and then send data very slowly but frequently enough to not trigger a timeout (as the timeout handler was before the Varint21FrameDecoder). This causes connections to stay open for a long time without much effort from an attacker, while the packet never leaves the Varint21FrameDecpder stage of the netty pipeline (causing no additional checks to happen and no logs of the connection to be created).
This will not have an impact on bad connections as without recieving full packets the underlying spigot server would timeout instead.
this patch orignally existed to prevent the constant cries from bad server
owners, however creates some room for abuse, this should plug that
hole by only allowing the server to send such broken packets
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
830ee8f2 #3061: Continue to fallback to underlying URLClassLoader
425dd451 Override classloader close method for completeness
6a039de8 Add preview of automatic library support
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
8d783aa1 #3058: Remove world limit
a4e5f500 Add full support for building on JDK [15,)
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
a7c6edeb #3041: Respond to login query requests in a way that matches the Vanilla client
updates log4j from 2.12 to 1.14, this includes a fix for systems
with a broken mac address which can cause the proxy to not start
on such broken machines
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
4f23b49f #3037: Update ProxiedPlayer#setDisplayName javadoc to current behaviour
cfcc8b1a Pin GitHub workflow build to ubuntu-20.04
ebec582c Add full support for building on JDK [8, 14]
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
9c078b78 #2985: Add Keybinds.SOCIAL_INTERACTIONS
281aecef Minecraft 1.16.4 support
This build has not been tested bar outside of typical smoke testing, however,
the changes in 1.16.4 to the protocol are virtually inexistant and should
have no bearing on stability, RUN AT YOUR OWN RISK, however.
Upstream updated to Netty 4.1.53.Final
Update maven-shade-plugin.log4j2-cachefile-transformer to 2.13.2 for compatibility with maven-shade-plugin 3.2.3
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
15204131 #2942: Players invisible in 1.16 where bungee is online mode but IP forwarding not enabled
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
23661737 Minecraft 1.16.3 support
5ab5a846 #2953: Fix player limit off by one
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
e93c762f #2921: ClickEvent without value exceptions in window title
023f407b #2928: Add IPOther special plugin message
64e4f465 #2931: Fix exceptions on ChatColor.of(Color) due to truncation
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
15b51413 #2908: Don't frame packets for dead connections
a0f9333a Bump version to 1.16-R0.4-SNAPSHOT
287e28a7 Release 1.16-R0.3
c1522ab9 #2909: Don't serialise as array for single element contents
0af4bfdb #2905: HoverEvent getValue compat method
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
94c4fcba Bump version to 1.16-R0.3-SNAPSHOT
a99f62f6 Release 1.16-R0.2
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
fd4864d4 #2899: Various chat API stability updates
c5610a6a #2897: Add params of recursive call of ChatComponent transform
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
bcc3460d #2893: Refactored Hover Code for Maintainability
4794fccf #2888: Correct font check in BaseComponent
637e7e93 #2884: Mojangson in hover events cannot be parsed
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
a64c34d2 #2875: Add the MessageRaw channel
1d40b8a8 #2866: Add support for contents in Hover Event
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
87cb3b90 Improve license info in pom.xml
198004da Add release maven repository
b41e9be4 Constrain dimension to String|Integer
Upstream has released updates that appears to apply and compile correctly.
This update has not been tested by PaperMC and as with ANY update, please do your own testing
BungeeCord Changes:
75af27ac Fix missing static on ChatColor.values
d0fd673b Minecraft 1.16 support + RGB ChatColor preview
