Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[hackerone] consider adding interstitial for IPFS navigations from non-IPFS origins #37558

Closed
diracdeltas opened this issue Apr 12, 2024 · 1 comment

Comments

@diracdeltas
Copy link
Member

diracdeltas commented Apr 12, 2024

if this were to exist, it should cover

  • javascript redirects
  • 30x redirects
  • meta redirects
  • link clicks maybe (at least if initiated by js)
  • probably window.open and similar
  • any other navigation that can be initiated by a HTTP/HTTPS page

dnslink should require "open in IPFS" to be clicked, so it can be excluded (#13609 )

more info: https://bravesoftware.slack.com/archives/C0145NAJP51/p1712941969957299?thread_ts=1712876397.603649&cid=C0145NAJP51

originally reported at https://hackerone.com/reports/2458960

@diracdeltas
Copy link
Member Author

This is deprecated by #37735 since we won't support ipfs schemes anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

When branches are created from issues, their pull requests are automatically linked.

2 participants