poanetwork / poa-popa

DApp for proof of physical address (PoPA) attestation for validators of POA Network
https://popa.poa.network
GNU General Public License v3.0
24 stars 18 forks source link

(Fix) Check that transaction data matches value in session #178

Closed fvictorio closed 6 years ago

fvictorio commented 6 years ago

Closes #168.

When a transaction is notified, check that the confirmation code hash in the transaction data matches the confirmation code in the given session. This avoids an attack where the same transaction is sent with different session keys and causes multiple postcards to be sent when only one payment was done.

coveralls commented 6 years ago

Pull Request Test Coverage Report for Build 538


Changes Missing Coverage Covered Lines Changed/Added Lines %
web-dapp/controllers/notifyRegTx.js 2 6 33.33%
web-dapp/server-lib/get_sha3cc.js 3 16 18.75%
<!-- Total: 9 26 34.62% -->
Totals Coverage Status
Change from base Build 536: -1.05%
Covered Lines: 1021
Relevant Lines: 1239

💛 - Coveralls
phahulin commented 6 years ago

@fvictorio please resolve conflicts