Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

minecraft-protocol

Package Overview
Dependencies
Maintainers
7
Versions
174
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

minecraft-protocol - npm Package Compare versions

Comparing version 1.38.1 to 1.39.0

4

docs/HISTORY.md
# History
## 1.39.0
* Use non-zero salt (@frej4189)
* Mark message as insecure if unsigned content is present (@frej4189)
## 1.38.1

@@ -4,0 +8,0 @@ * Update chat example for 1.19 (#1059) (@frej4189)

2

package.json
{
"name": "minecraft-protocol",
"version": "1.38.1",
"version": "1.39.0",
"description": "Parse and serialize minecraft packets, plus authentication and encryption.",

@@ -5,0 +5,0 @@ "main": "src/index.js",

@@ -123,3 +123,3 @@ const crypto = require('crypto')

senderTeam: packet.senderTeam,
verified: pubKey ? client.verifyMessage(pubKey, packet) : false
verified: (pubKey && !packet.unsignedChatContent) ? client.verifyMessage(pubKey, packet) : false
})

@@ -140,3 +140,3 @@ return

const expired = !packet.timestamp || tsDelta > messageExpireTime || tsDelta < 0
const verified = updateAndValidateChat(packet.senderUuid, packet.previousSignature, packet.signature, hash.digest()) && !expired
const verified = !packet.unsignedChatContent && updateAndValidateChat(packet.senderUuid, packet.previousSignature, packet.signature, hash.digest()) && !expired
client.emit('playerChat', {

@@ -189,3 +189,3 @@ plainMessage: packet.plainMessage,

options.timestamp = options.timestamp || BigInt(Date.now())
options.salt = options.salt || 0
options.salt = options.salt || 1n

@@ -192,0 +192,0 @@ if (options.skipPreview || !client.serverFeatures.chatPreview) {

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc