Skip to content

Fix spawnvehicle ownership enforcement - #380

Merged
GhzGarage merged 1 commit into
mainfrom
ghzgarage-fix-spawnvehicle-ownership-check-02d
Aug 25, 2026
Merged

GhzGarage merged 1 commit into
mainfrom
ghzgarage-fix-spawnvehicle-ownership-check-02d

Conversation

@GhzGarage

Copy link
Copy Markdown
Contributor

Summary

  • remove trust in client-provided spawnvehicle model parameter
  • explicitly ignore the callback vehicle argument and spawn from the owned DB vehicle for the requesting citizen
  • preserves existing owned-plate + citizenid ownership check path

Closes #377

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@GhzGarage
GhzGarage merged commit f22a09f into main Aug 25, 2026
2 checks passed
@GhzGarage
GhzGarage deleted the ghzgarage-fix-spawnvehicle-ownership-check-02d branch August 25, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

spawnvehicle has no ownership check - spawn any vehicle/plate anywhere

1 participant