cmdruid / cmdruid/lightning-tip-jar
Security concern of displaying the voltage url when tipping?
Open
bug
exploit
- Dominant language
- JavaScript
- Stars
- 4
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
Displays the voltage node URL when a customer scans the code to tip:
- is this ok from a security perspective?
- is can we control this setting somehow in LNbits (if we wanted to?)
- note that on withdraw, the wallet refers to vercel.app domain as the counterparty
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.