Page MenuHomePhabricator

[explorer] Add replace rule for token data
ClosedPublic

Authored by johnkuney on Aug 21 2024, 18:36.

Details

Reviewers
tobias_ruck
Group Reviewers
Restricted Project
Commits
rABC838bf8d1b4dc: [explorer] Add replace rule for token data
Summary

If you check out https://explorer.e.cash/address/ecash:qz2708636snqhsxu8wnlka78h6fdp77ar59jrf5035
you can see the coins dropdowns for the tokens dont work and there is some data printed to the screen at the bottom

With Tobias's help we figured out this was due to a token name with a <script> tag in it. or an improper closing </script>
tag causing the display issue probably. But also could be possible avenue for a script injection

Adding a replace for '<' and '>' to their hexadecimal forms to prevent any unwanted html interpretation

Test Plan

preview the site and check /address/ecash:qz2708636snqhsxu8wnlka78h6fdp77ar59jrf5035 works without issue

Diff Detail

Repository
rABC Bitcoin ABC
Lint
Lint Not Applicable
Unit
Tests Not Applicable