v1.4.0

• Download:
  • GitHub
  • Modrinth (Velocity)

Security

• Fixed forged plugin messages reaching the backend (GHSA-4p78-89rh-8px5)
  • A player with a modified client could send messages that the proxy passed on to the backend as if they came from Velocity. This let them post cross-server chat and direct messages under any name, or stall the backend.
  • The proxy now keeps every LunaticChat plugin message to itself.

New Features

• Added support for Velocity 4.3.0
  • Support for Velocity 4.2.x and earlier has ended at the same time.

Improvements

• Performed internal cleanup.