From 477394d31443dce77cb353f9cb59ef2911f4da8d Mon Sep 17 00:00:00 2001 From: CraftBukkit/Spigot Date: Sat, 22 Jun 2024 18:48:51 +1000 Subject: [PATCH] #1433: HumanEntity#openInventory(InventoryView) should only support views belonging to the player By: Miles Holder --- .../java/org/bukkit/craftbukkit/entity/CraftHumanEntity.java | 1 + 1 file changed, 1 insertion(+) diff --git a/paper-server/src/main/java/org/bukkit/craftbukkit/entity/CraftHumanEntity.java b/paper-server/src/main/java/org/bukkit/craftbukkit/entity/CraftHumanEntity.java index ffd0e83f5..025e84420 100644 --- a/paper-server/src/main/java/org/bukkit/craftbukkit/entity/CraftHumanEntity.java +++ b/paper-server/src/main/java/org/bukkit/craftbukkit/entity/CraftHumanEntity.java @@ -371,6 +371,7 @@ public class CraftHumanEntity extends CraftLivingEntity implements HumanEntity { @Override public void openInventory(InventoryView inventory) { + Preconditions.checkArgument(this.equals(inventory.getPlayer()), "InventoryView must belong to the opening player"); if (!(getHandle() instanceof EntityPlayer)) return; // TODO: NPC support? if (((EntityPlayer) getHandle()).connection == null) return; if (getHandle().containerMenu != getHandle().inventoryMenu) {