bitshares / bitshares/bitshares-ui
[5] Notify user in console when accessing external addresses
- Dominant language
- JavaScript
- Stars
- 520
- Forks
- 575
- Avg merge
- 12h 7m
- Merged PRs (30d)
- 5
Description
**Is your feature request related to a problem? Please describe.**
If there is a phishing URL get included in the wallet, is the application able to detect and even prevent it from loading?
**Describe the solution you'd like**
Things that I've thought of:
* use a white list which contains known API nodes and gateways, probably required access for some internal components, known friendly URLs e.g. block explorer, and etc
* even witnesses' and committee members' URLs aren't trusted
* avoid automatically connecting to unexpected remote IP addresses
* warn the user if clicked on an external link
For light wallet binaries, perhaps it can be done by the app container? Or even automatically add rules to firewall?
**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.
**Additional context**
Add any other context or screenshots about the feature request here.
Contributor guide
Research direction
The issue does not name files, tests, or an entry point. Start by tracing how the wallet handles external links and remote connections, then clarify which URLs must be allowed, blocked, or warned about and whether the behavior belongs in the application or its container. Done requires an agreed security policy and coverage for the selected cases.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, react
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100