Commit d81bfa6
authored
ci: ignore nancy failre of rs/cors@v1.8.2 (bnb-chain#3327)
It is an issue reported in rs/cors#170 and
fixed by rs/cors#171, which was included in release
v1.11.0(Apr 2024): https://github.com/rs/cors/releases/tag/v1.11.0
But v1.8.2 was released in Dec 2021, which may have a lot difference.
And this vulnerability is limitted only to RPC nodes with maliciously configuration
in config.tion:
[Node]
HTTPCors = ["<malicious cors>",...]
So instead of upgrade to v1.11.0+, simply add it to nancy ignore for now1 parent b91df1d commit d81bfa6
1 file changed
+2
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
| 2 | + | |
| 3 | + | |
0 commit comments