RocketChat / RocketChat/Rocket.Chat

MetaCert App

Open
#8,283 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Create a MetaCert App that once enabled and configured will call MetaCert API from our backend using our existing internal spam/phish filtering hooks, before indexing URLs, making sure they are safe.

The admin should have the option to configure the behaviour once a bad URL is detected:

  • Block the message entirely.
  • Replace the URL with the word "BLOCKED" and the reason.
  • Add a warning message on top of the original.
API Documentation:

https://developer.metacert.com/

Reference Implementations:

https://marketplace.atlassian.com/plugins/com.atlassian.hipchat.metacert.2/cloud/overview
https://metacert-crypto.slack.com/apps/A0JJ90L4R-security-bot-by-metacert

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the existing internal spam/phish filtering hooks used before URL indexing, then read the MetaCert API documentation and the linked reference implementations. Define the admin configuration and verify that detected bad URLs support blocking, replacement with "BLOCKED" and the reason, or a warning above the original message.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.