project-serum / sol-wallet-adapter

Other
185 stars 93 forks source link

Remove auto approve from api #45

Open tiago18c opened 2 years ago

tiago18c commented 2 years ago

API consumers shouldn't have access to this knowledge, this should be strictly on the wallet side.

Why? Today I was investigation a couple of phishing websites, and both of them check if the user has auto approved or not. Both were acting differently, but both were abusing this information.

tiago18c commented 2 years ago

More context: https://github.com/solana-labs/wallet-adapter/issues/82