palantir / phishcatch

A browser extension and API server for detecting corporate password use on external websites
https://github.com/palantir/phishcatch/wiki
Apache License 2.0
92 stars 21 forks source link

False positives with the checkDOMHash function #40

Open malcode-eth opened 2 years ago

malcode-eth commented 2 years ago

Hello,

Thank you for this amazing project ! We meet false positives with the domhash capabilities of the extension. It lies in the checkDOMHash function.

Some users trigger potential phishing alerts of type 'domhash' on different URLs that seem unrelated to the entreprise page we want to protect. Could you share hints on how I could proceed to debug this ?

For now, we implemented a new option ('_display_domhashalerts') in config.ts so that users do not see the alerts while we still receive them on the server side, quite useful.

Thanks !