Uploaded image for project: 'Minecraft: Java Edition'
  1. Minecraft: Java Edition
  2. MC-257811

clickEvents in item names allow executing commands as a player that clicked on a death message

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • None
    • 1.19.2
    • None
    • Unconfirmed
    • (Unassigned)

      Getting an item with clickEvent in it's name allows command execution as a player that clicked it.
      Steps to reproduce:

      1. Execute the following: /give @s netherite_sword{Damage:0,display:{Name:'{"text":"click me! ","clickEvent":{"action":"run_command","value":"/op @a"'}}}}
      2. Kill a player with the item you got.
      3. A player (out of curiosity) clicks on item name, executes the command / sends a chat message, without knowing what would it do.

            Unassigned Unassigned
            CoolestGuy94 CoolestGuy94
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: