Bukkit Forums

Jun
09
by EvilSeph at 5:28 PM
(4,745 Views / 0 Likes)
6 Comments
A couple weeks ago many of you brought up an issue regarding the loss of formatting options on BukkitDev, our Minecraft plugins download service powered by CurseForge. After further investigation, it turns out several formats were disabled due to the security risk they posed to the site - a severe XSS vulnerability was discovered in the Markdown parser as well as a potential security risk in the Safe HTML parser.

As a security precaution the affected parsers were disabled from further usage and new projects were forced to use a more secure alternative. Unfortunately, due to a bug in the system, every project was accidentally set to the WikiCreole format and developers found themselves unable to switch their projects back to the formatting they previously used. This was a bug and completely unintended.

Having conducted an extensive investigation into the vulnerabilities we discovered and concluding that we have addressed them accordingly, I'm happy to announce that Safe HTML is...
Jun
07
by lukegb at 3:23 PM
(8,363 Views / 0 Likes)
38 Comments
Curse Account Association has now been reactivated, but any users who previously had accounts associated will need to reassociate them.

The account association control panel can be found http://forums.bukkit.org/pages/curse-association/ or by hovering over your username in the top-right hand corner of the forums, then clicking "Curse Account Association".

At the moment, you will need to log in with your Bukkit forums username and password again on the webpage that appears, but I hope to be able to resolve this soon.

Once this is done, just follow the instructions on the association page to get your accounts linked up again.

To reiterate, at the moment, this association will only mean that on your forums post, a "dev.bukkit.org profile" section will appear, linking to your profile on dev.bukkit.org, and a "My Plugins" section will become available on your profile. This section will list all the plugins in the server mods section that you are listed as a...
May
25
by EvilSeph at 9:35 PM
(35,861 Views / 0 Likes)
134 Comments
A new CraftBukkit Recommended Build (1.2.5-R3.0) that provides Minecraft 1.2.5 compatibility and fixes issues in CraftBukkit 1.2.5-R2.0 is now available. As this RB contains a critical dupe exploit fix, upgrading is highly recommended.

Will plugins break with this build?
Provided the developers of the plugins you are using are keeping up with the development of Bukkit, all your plugins should work fine.

Notes:
This Recommended Build includes an upgrade to the jLine we use in Bukkit. As a result, Windows servers need the Visual C++ 2008 redistributable if you want to be able to see text formatting in your console (or use -nojline to disable jLine if you don't want to).

Unlike the previous Recommended Build (1.2.5-R2.0), this new RB does not need anything special like ANSICON.

Known Issues:
  • None.
For more detailed information on what is contained in this update,...
May
17
by EvilSeph at 8:35 PM
(42,432 Views / 0 Likes)
152 Comments
A new CraftBukkit Recommended Build (1.2.5-R2.0) that provides Minecraft 1.2.5 compatibility and fixes issues in CraftBukkit 1.2.5-R1.0 is now available.

This new RB is the result of our focus on improving performance and addressing any performance related issues people had with the previous RB, 1.2.5-R1.0. As a result, updating to this new RB is recommended.

Will plugins break with this build?
Provided the developers of the plugins you are using are keeping up with the development of Bukkit, all your plugins should work fine.

Notable Changes Include:
- Added ability to toggle stripping of formatting characters in logs (pass "-log-strip-color" to the java process when you launch it).
- Server is now able to send all valid unicode characters. If you are being disconnected on join with an error similar to the following, update your client to at least...