Skip to content

Fix: /back onto nether roof exploit when destination is unsafe. - #6602

Merged
JRoy merged 3 commits into
EssentialsX:2.xfrom
MidSpike:2.x
Aug 8, 2026
Merged

Fix: /back onto nether roof exploit when destination is unsafe.#6602
JRoy merged 3 commits into
EssentialsX:2.xfrom
MidSpike:2.x

Conversation

@MidSpike

@MidSpike MidSpike commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Information

This PR fixes #3318 and fixes #4483.

Details

Proposed fix:

  • Created a crude isAboveNetherRoof safeguard for getSafeDestination.

Environments tested:

OS: Linux (Server and Client)

Java version: 25

  • Most recent Paper version (XX.YY.Z, git-Paper-BUILD)
  • CraftBukkit/Spigot/Paper 1.12.2
  • CraftBukkit 1.8.8
  • Paper 1.21.11

Demonstration:

Before:

2026-08-04_21-59-34.mp4

After:

2026-08-04_22-05-56.mp4

MidSpike and others added 2 commits August 4, 2026 21:47
JRoy
JRoy previously approved these changes Aug 8, 2026
@JRoy
JRoy enabled auto-merge August 8, 2026 20:45
@JRoy
JRoy added this pull request to the merge queue Aug 8, 2026
Merged via the queue into EssentialsX:2.x with commit 382de4f Aug 8, 2026
1 check passed
Euphillya added a commit to Euphillya/Essentials-Folia that referenced this pull request Aug 13, 2026
EssentialsX@d2a7e0f Update paperVersion to 26.2.build.92-stable (EssentialsX#6575)
EssentialsX@f6f13fd Show muted players' private messages to social spies (EssentialsX#6569)
EssentialsX@382de4f Fix: /back onto nether roof exploit when destination is unsafe. (EssentialsX#6602)
wosnxn123 added a commit to wosnxn123/Essentials-Folia that referenced this pull request Aug 20, 2026
This reverts commit 1fcbec7. The bump was WRONG: 28eb89f ("Add toolchain
auto download EssentialsX#6574", 2026-06-16) is not newer than 382de4f - it is a
side-branch commit two months older, and 382de4f IS the current
EssentialsX/Essentials 2.x tip (verified: git rev-parse origin/2.x ==
382de4f, and rev-list 28eb89f..382de4f == 6 while 382de4f..28eb89f == 1).

Root cause: I read 'git diff Essentials' backwards - the '-Subproject commit
382de4f' side was the correct COMMITTED pin and '+28eb89fb0' was a stale
working-tree checkout, which I mistook for a new upstream. The build number
falling from dev+37 to dev+31 was the signal that this was a downgrade, and I
rationalised it instead of checking.

The downgrade dropped six real upstream commits, including the /back
nether-roof exploit fix (EssentialsX#6602), social-spy visibility of muted players'
private messages (EssentialsX#6569), paperVersion 26.2.build.92-stable (EssentialsX#6575) and the
cached online-user lookup optimisation (EssentialsX#6595).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

/back command teleporting players to nether roof /back teleports to the nether roof

2 participants