Ghost_chu 25cf85a7dc
Execute simple check before enable BungeeCord hook.
This commit added a simple check that check spigot.yml -> settings.bungeecord status by using AuthMe built-in method bukkitService.isBungeeCordConfiguredForSpigot() and disable hook if it enabled and not behind an BungeeCord proxy.

Register plugin message channel without BungeeCord proxy will allow attacker send fake login payload to treat AuthMe login with Plugin Message for him and bypass the user login.

This commit also updated SettingsWarner for new behavior.
2022-07-06 15:39:06 +08:00
..
2022-01-30 10:32:49 +01:00