Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add social networks redirection for metamask app #400

Merged
merged 1 commit into from
Jan 19, 2024
Merged

add social networks redirection for metamask app #400

merged 1 commit into from
Jan 19, 2024

Conversation

hichri-louay
Copy link
Contributor

No description provided.

@hichri-louay hichri-louay merged commit c600669 into develop Jan 19, 2024
1 of 2 checks passed
@hichri-louay hichri-louay deleted the redirect-metamask-app branch January 19, 2024 14:12
github-advanced-security[bot]
github-advanced-security bot found potential problems Jan 19, 2024
View reviewed changes
routes/profile.routes.js
@@ -645,7 +645,7 @@
(req, res, next) => {
passport.authenticate('facebook_strategy_add_channel', {
failureRedirect:
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL )+

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -655,7 +655,7 @@
redirect = req.query.state.split('|')[1]
let message = req.authInfo.message
response.redirect(
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -743,7 +743,7 @@
if (!req.query.error) next()
else
res.redirect(
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -754,7 +754,7 @@
let redirect = req.query.state.split('|')[1]
let message = req.authInfo.message
res.redirect(
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -804,7 +804,7 @@
(req, res, next) => {
passport.authenticate('tikTok_strategy_add_channel', {
failureRedirect:
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -882,7 +882,7 @@
message = 'account_linked_with_success'
}
res.redirect(
process.env.BASED_URL + redirect + '?message=' + message
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) + redirect + '?message=' + message

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -1180,15 +1180,15 @@
'/callback/link/facebook',
passport.authenticate('link_facebook_account', {
failureRedirect:
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
'/home/settings/social-networks?message=access-denied',
}),
async (req, response) => {
try {
let state = req.query.state.split('|')
let url = state[1]
response.redirect(
process.env.BASED_URL + url + '?message=' + req.authInfo.message
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) + url + '?message=' + req.authInfo.message

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
@@ -1233,15 +1233,15 @@
'/callback/link/google',
passport.authenticate('link_google_account', {
failureRedirect:
process.env.BASED_URL +
(process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) +

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
routes/profile.routes.js
'/home/settings/social-networks?message=access-denied',
}),
async (req, res) => {
try {
let state = req.query.state.split('|')
let url = state[1]
let message = req.authInfo.message
res.redirect(process.env.BASED_URL + url + '?message=' + message)
res.redirect((process.env.NODE_ENV === "mainnet" ? (req.origins.header.includes('https://app.satt.com') ? process.env.METAMASK_BASED_URL : process.env.BASED_URL) : process.env.BASED_URL ) + url + '?message=' + message)

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://app.satt.com
Loading
' can be anywhere in the URL, and arbitrary hosts may come before or after it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@hichri-louay