syeyoung

`Keyboard.enableRepeatEvents(boolean)` should not be called at ticks, but instead be set to true on `GuiScreen.initGui()` and `GuiScreen.onGuiClosed()` Anyways `Keyboard.enableRepeatEvent` call is also expensive in general

Controlling ServerId is enough to get an attacker logged in to any Minecraft Server as victim's account

1

To prevent this attack, you need to run some kind of code analysis, then make sure that 1. a code that uses joinServer api generates some secret stuff that goes...