You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In several instances of the codebase, capabilities are not validated to be borrowable before storing them. The following code locations should have the capability validated:
setManagerCapabilityFilter function in contracts/HybridCustody.cdc:418 where the managerCapabilityFilter is not nil.
Consequently, the capabilities might fail to borrow the underlying resource reference when used, which is inefficient.
Recommendation
We recommend validating the capabilities mentioned above.
The text was updated successfully, but these errors were encountered:
Closes: #63
Added checks on Capability parameters throughout the HybridCustody
contract, along with test coverage for Manager init values. I realize
some of these checks are redundant (e.g. `HybridCustody.createManager()`
flowing through to `Manager.init()`), but helpful for readability.
Description
Recommendation
The text was updated successfully, but these errors were encountered: