QR url scanning should only redirect to white listed urls

nimiq / safe

MIT License

8 stars 8 forks source link

Open danimoh opened 4 years ago

danimoh commented 4 years ago

To avoid the risk of users getting phished, only redirect to whitelisted URLs.

sisou commented 4 years ago

What would be whitelisted URLs?

nimiq.com, hub.nimiq.com, safe.nimiq.com?

sisou commented 4 years ago

Or basically everything under *.nimiq.com?

danimoh commented 4 years ago

For the moment we would only need hub.nimiq(-testnet).com. But adding all 3 domains or *.nimiq.com is also fine imo.