Skip to content
This repository has been archived by the owner on Nov 14, 2023. It is now read-only.

utils.js security #60

Open
Remember-1 opened this issue Jan 16, 2019 · 4 comments
Open

utils.js security #60

Remember-1 opened this issue Jan 16, 2019 · 4 comments

Comments

@Remember-1
Copy link

In the util/utils.js file line 21 eval maybe execute malice code,

@Remember-1 Remember-1 changed the title 111111111 utils.js security Jan 17, 2019
@dreamer-zq
Copy link
Collaborator

@whodoyouremember Thank you, I will modify this code right away.

dreamer-zq pushed a commit to dreamer-zq/irisnet-crypto that referenced this issue Jan 18, 2019
shineabel pushed a commit that referenced this issue Jan 18, 2019
@Remember-1
Copy link
Author

Remember-1 commented Jan 18, 2019

Is there any reward for this issue?

@laserlemon
Copy link

@zhiqiang-bianjie 👋 I'm on the team at GitHub responsible for delivering security vulnerability alerts. Is the irisnet-crypto package released to NPM or is it only installed via Git? Thank you!

@dreamer-zq
Copy link
Collaborator

@zhiqiang-bianjie 👋 I'm on the team at GitHub responsible for delivering security vulnerability alerts. Is the irisnet-crypto package released to NPM or is it only installed via Git? Thank you!

Currently only installed via git, may pass npm later

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants