SpigotSecurity | AntiCrasher, Packet & Exploit Protection

Security, Compatibility and Configuration Update Added ProtocolLib inbound packet fallback Improved safe PacketEvents handling KeepAlive packets are completely excluded from cancellation and rate limits Added detailed rule-specific crash codes Added crash codes to PreLogin rejection messages Added /spigotsecurity lookup and module status information Improved configuration reload of listeners and integrations Added bounded JSON validation for books and chat components Added NBT key, node, list, array and string limits Improved modern Item Data Component and nested-item validation Added outgoing inventory, equipment and merchant-item protection Added outgoing metadata, particle, sound, explosion and velocity validation Added command-tree depth, edge and cycle protection Added Anvil rename protection Added existing front/back sign validation Added server-list response protection Added passenger graph and entity interaction limits Improved End Gateway, portal and inventory-dupe checks Added configurable PreLogin and connection messages Invalid clientbound data no longer kicks the receiving player by default Improved Geyser and Floodgate detection refresh Replaced the global Bedrock bypass with configurable rate and size multipliers Disabled the global Spectator security bypass by default Added per-protection player, world, permission and Bedrock exceptions Reduced repeated chunk entity scans Added bounded rate, packet and diagnostic caches Improved Folia-safe global, player and asynchronous scheduling Improved asynchronous file logging with buffered batch writes Improved read-only region-file header, sector and compression validation Expanded configuration validation for invalid or missing values Improved ProGuard configuration without globally hiding all warnings No console logger spam

Website-Update