Mojira Archive
MCPE-79588

Marketplace Purchasable State Bypass

Items which are flagged non purchasable having the price of 0/FREE can now be purchased via Marketplace.

Current beta versions does not disable the button for purchase unlike the released ones and it seems server side does not have any additional checks whether the item is available for purchase.

https://www.minecraft.net/bin/minecraft/productmanagement.productdetails.json?id=cc1e1b86-1863-4c1c-9103-b82b2b70a74b

Checking the flag under displayProperties.purchasable indicates that this item cannot be purchased.

minecraft://openStore/?showStoreOffer=cc1e1b86-1863-4c1c-9103-b82b2b70a74b

But by visiting the unlisted item via (beta) MC's custom URL scheme makes it possible for users to proceed with the purchase.

Possible fixes could be:

  • Check the purchasable flag and disable the button accordingly just like before.
  • Set its price to a million or something that seems impossible for purchase.
  • Add an additional check on server side regarding the purchasable state.

Incomplete

schnabear

2020-05-21, 05:44 PM

2023-01-20, 06:12 PM

2023-01-20, 06:12 PM

0

0

Unconfirmed

396640

1.16.0.68 Beta - 1.16.01.16.0.68 Beta, 1.16.0.67 Beta, 1.16.0.66 Beta, 1.16.0.63 Beta, 1.16.0.61 Beta, 1.16.0

-