Skip to content

Privacy issue: /groups invite reveals vanished players #27

@BAD7777

Description

@BAD7777

Description:

There is a privacy issue when using this plugin on a Velocity proxy.

When creating a group and running /groups invite, the player list includes users who are currently vanished (e.g., moderators/admins hidden via proxy or backend plugins).

This behavior exposes staff members who should remain invisible, which can interfere with moderation and administrative work.

Environment:

  • Platform: Velocity
  • Plugin: pv-addon-groups

Steps to reproduce:

  1. Create a group
  2. Run /groups invite
  3. Check the player list
  4. Vanished players are visible

Expected behavior:
Players who are vanished (either on proxy level or backend servers) should not be visible in the /groups invite list.

Actual behavior:
Vanished players appear in the list, revealing their presence.

Suggestion:
Ensure compatibility with vanish systems on Velocity and backend servers by filtering out hidden players from the invite list (e.g., via permissions or vanish APIs).

Additional context:
This is especially important for networks using Velocity where staff rely on vanish for moderation across multiple servers.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions