Minecolonies: War 'N Taxes

:lock: Raid Announcement Privacy Fix

• FIXED: Hostile and Neutral Player Announcements - Raid notifications now only sent to colony allies
• Security Improvement: Hostile players no longer receive raid alerts when their target colony is being raided
• Privacy Enhancement: Neutral (non-allied) players are excluded from all raid-related announcements
• Targeted Notifications: Only colony Owner, Officers, and Friends receive raid announcements including:
  • Raid start alerts ("The Colony is currently being raided!")
  • Raid boss bar progress tracking
  • Guard/militia defender kill notifications
  • Hostile player entry warnings
  • Raid completion/failure messages
  • Tax transfer notifications
  • Raid end title commands

:shield: Block Interaction Filter System

• NEW: Configurable Block Blacklist/Whitelist - Server-controlled block interaction filtering during raids and wars
• Anti-Griefing Protection: Blacklist prevents interaction with critical blocks (overrides ALL other protection systems)
• Gameplay Flexibility: Whitelist explicitly allows interaction with specific blocks (e.g., chests for looting)
• HIGHEST Priority Enforcement: Runs before all other protection handlers to guarantee rule enforcement
• Modded Block Support: Works with any mod using standard block registry IDs (modid:blockname)
• Configurable Scope: Enable/disable filtering separately for wars and raids
• Default Security: Protects bedrock, command blocks, structure blocks, and MineColonies town halls by default
• Default Whitelist: Allows chest, barrel, furnace, and hopper interactions by default
• Smart Conflict Detection: Only activates during active raids/wars, zero overhead otherwise
• Comprehensive Coverage: Filters block breaking, placement, and usage (right-click) interactions

:globe_with_meridians: Web API for WarStats

• NEW: REST API Server - Secure HTTP server for exposing war statistics to external websites and applications
• 5 REST Endpoints: Health check, all player stats, leaderboards, individual player lookup, server statistics
• Offline Player Support: Optional caching system to include statistics from offline players
• API Key Authentication: Configurable authentication with X-API-Key header
• Rate Limiting: Per-IP rate limiting (default: 60 requests/minute) to prevent abuse
• CORS Support: Cross-Origin Resource Sharing enabled for web browser access
• Read-Only Access: GET-only endpoints prevent data modification
• Zero Client Impact: Server-side only execution, no client-side requirements
• Intelligent Caching: Background NBT parsing with configurable refresh intervals
• JSON Responses: Clean, structured JSON data for easy integration

Configuration Options:

• EnableWebAPI - Master toggle for the API server (default: false)
• WebAPIPort - HTTP port for the API server (default: 8090)
• WebAPIKey - API key for authentication (default: "change-me-in-production")
• WebAPIRateLimitRequestsPerMinute - Rate limit per IP (default: 60)
• WebAPIRequireAuthentication - Require API key authentication (default: true)
• WebAPIEnableOfflinePlayers - Include offline player statistics (default: false)
• WebAPICacheRefreshMinutes - Offline cache refresh interval (default: 10)

** Security Features:**

• Authentication Required: API key protection enabled by default
• Rate Limiting: Per-IP request throttling prevents abuse
• Read-Only: No write operations, GET requests only
• Input Validation: All parameters validated and sanitized
• Daemon Threads: Background processing won't block server shutdown
• Error Handling: Graceful error responses with proper HTTP status codes