Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

prevent xss on handleError #149

Merged
merged 1 commit into from
May 3, 2024
Merged

prevent xss on handleError #149

merged 1 commit into from
May 3, 2024

Conversation

gtg7784
Copy link
Member

@gtg7784 gtg7784 commented May 2, 2024

Description

Update error response as json to prevent rendering on browser, It can prevent reflected xss attack

Changes

Error response will be json, not the text like below

{"message":"Network 1234 is not supported."}

Copy link

github-actions bot commented May 2, 2024

Visit the preview URL for this PR (updated for commit dc4991e):

https://astar-token-api--pr149-fix-xss-on-error-pi7tfd5m.web.app

(expires Thu, 09 May 2024 09:57:44 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: f99fa4f4f8f3bb450e6e842f7e1c7783d6d896a3

@gtg7784 gtg7784 merged commit e9b7f5f into prod May 3, 2024
7 checks passed
@gtg7784 gtg7784 deleted the fix/xss-on-error branch May 3, 2024 03:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants