Changelog

[1.1.8] - 2024-07-29

Security

• CRITICAL: Fixed trusted player list leak between unlinked Stock Tickers — standalone tickers no longer sync trusted lists with each other
• Owner is now implicitly trusted in isTrustedOnNetwork() — no need to manually self-add
• Added dimension isolation — same-frequency tickers in different dimensions no longer sync trust
• Blocked non-player entities (deployers) from claiming tickers as owner
• Owner-claim on shift-click now runs server-side only
• Added mayBuild() permission check to both packet handlers
• Reject unknown player names instead of silently creating broken offline-mode UUIDs

GUI

• New custom Gui
• GUI now closes after successfully adding a trusted player

Fixed

• Shift-click no longer desyncs client/server — server correctly cancels original interaction
• getTrustedPlayers() now returns a copy of the internal map (prevents mutation leaks)
• Ticker registration flag set only after all sync calls succeed
• Removed unused reflection fallback artifacts

Changed

• Version bumped to 1.1.8