Mojira Archive
MC-276865

Locked chests have security problems.

I think there is a serious security problem with the minecraft:lock component that uses the minecraft:custom_name component to match the chest, and the minecraft:custom_name of the key is easily known, then there may be a thief who uses the anvil to rename his own item to steal the chest's items by impersonating the real key.

I recommend having the key use a component that is not visible to others (e.g. minecraft:password) to make it more secure for the player to keep the items in the chest without being leaked and the item being stolen.

Invalid

Tan_Jansheng

2024-09-20, 09:48 AM

2024-09-21, 08:26 AM

2024-09-20, 04:19 PM

0

2

Unconfirmed

(Unassigned)

item-component, locked, locked-chest, safe, serious

1.21.1, 24w38a

-