Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

utils.js security #60

Open
whodoyouremember opened this issue Jan 16, 2019 · 4 comments
Open

utils.js security #60

whodoyouremember opened this issue Jan 16, 2019 · 4 comments

Comments

@whodoyouremember
Copy link

In the util/utils.js file line 21 eval maybe execute malice code,

@whodoyouremember whodoyouremember changed the title 111111111 utils.js security Jan 17, 2019
@dreamer-zq
Copy link
Member

@whodoyouremember Thank you, I will modify this code right away.

dreamer-zq pushed a commit to dreamer-zq/irisnet-crypto that referenced this issue Jan 18, 2019
shineabel pushed a commit that referenced this issue Jan 18, 2019
@whodoyouremember
Copy link
Author

whodoyouremember commented Jan 18, 2019

Is there any reward for this issue?

@laserlemon
Copy link

@zhiqiang-bianjie 👋 I'm on the team at GitHub responsible for delivering security vulnerability alerts. Is the irisnet-crypto package released to NPM or is it only installed via Git? Thank you!

@dreamer-zq
Copy link
Member

@zhiqiang-bianjie 👋 I'm on the team at GitHub responsible for delivering security vulnerability alerts. Is the irisnet-crypto package released to NPM or is it only installed via Git? Thank you!

Currently only installed via git, may pass npm later

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants