Potential security issue

[ghost]

VentureChat/src/main/java/mineverse/Aust1n46/chat/listeners/CommandListener.java

Line 142 in 05762e0

if (item == null || !e.getView().getTitle().contains("VentureChat")) {

Checking event.getView().getTitle() to see whether your custom inventory is being used is unsafe, as renaming a chest in an anvil allows users to set their own inventory titles. The correct way to check if your custom inventory is involved with an event is by using custom holders, see here: https://docs.papermc.io/paper/dev/custom-inventory-holder

[HugKitten]

It's surprising how often this mistake is made

[Aust1n46]

Made it 10 years before anyone noticed ;)