BalancedTeam

Security & Fixed

• Patched PlaceholderAPI Chat Injection Vulnerability:
  • Adjusted evaluation order in ChatManager to resolve PAPI variables on the message template prior to inserting the user's chat message, completely mitigating placeholder injection risks (such as unauthorized script evaluation or sensitive variable inspection);
  • Added strict permission checks (balancedteam.chat.color) for chat color code parsing and optimized MessageUtil.sendRawMessage to send pre-formatted messages directly without redundant regex color passes.
• Enhanced Concurrency Boundary Protection for Team Size & Relations:
  • Added pre-checks and synchronized double-checked locking inside TeamManager.addMember to strictly enforce max_members during concurrent member joins;
  • Added global boundary checks for max_allies and max_enemies as well as mutual exclusion checks inside RelationManager to prevent relation limit bypasses during concurrent requests.