Mojira Archive
MCPE-180755

CDN Resource Packs don't ask download prompt, just download it immediately

Detailed video: https://file.minjae.dev/share/QmSp5xXY

 

The client doesn't ask resource pack download for CDN resource packs in third party servers. This worked as expect on 1.20.30 (it asked download prompt)

https://github.com/pmmp/PocketMine-MP/pull/6064

 

This PR includes video in 1.20.30, which the CDN resource pack was introduced. The client asked resource pack download also for CDN resource packs.

 

This could lead to potential security vulnability if third party server owners decide to use this for malcious purpose, so I made this report private.

Unresolved

alvin0319

2024-04-20, 05:19 PM

2024-08-12, 10:51 PM

0

1

Plausible

1.20.73 Hotfix, 1.21.0, 1.21.1 Hotfix

-