Wes builder_tag missing for all balloonomancy recipes

Wait, custom tabs' owner tag was trusted to clients this entire time?

I think they should add a server-side check for tab tags instead, as some mods are probably vulnerable to this issue.

6 hours ago, Tykvesh said:

Wait, custom tabs' owner tag was trusted to clients this entire time?

I think they should add a server-side check for tab tags instead, as some mods are probably vulnerable to this issue.

It used to be 100% client-side checks to stop people from crafting the stuff after you prototyped it as the character.  But even those had both the builder_tag and owner_tag set appropriately.  That was fixed, so even prototyping doesn't work.  This bug is that they forgot to add the builder_tag like all of the other character-specific crafting stuff.

31 minutes ago, CarlZalph said:

 

Yes I got that, but I meant that there are probably mods where recipes locked out via a tab tag only. Which as it turns out is client-side, therefore prone to exploits.

1 hour ago, Tykvesh said:

Yes I got that, but I meant that there are probably mods where recipes locked out via a tab tag only. Which as it turns out is client-side, therefore prone to exploits.

I see.

Well if it's any solace to know, a lot of mods fail to properly sanitize their RPCs they create causing crashes, exploits, etc.  It's up to the modder to make sure their programming is proper.