Skip to content

Commit bd15294

Browse files
Update CAIPs/caip-282.md
thanks chris13524 Co-authored-by: Chris Smith <[email protected]>
1 parent 56762ca commit bd15294

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

CAIPs/caip-282.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,7 @@ Regarding security considerations it's important to consider that the WalletData
146146

147147
Application developers are expected to actively detect for misbehavior of properties or functions being modified in order to tamper with or modify other wallets. One way this can be easily achieved is to look for when the uuid property within two WalletData objects match. Applications and Libraries are expected to consider other potential methods that the WalletData objects are being tampered with and consider additional mitigation techniques to prevent this as well in order to protect the user.
148148

149-
### Prevent SVG Javascript Execution
149+
### Prevent SVG JavaScript Execution
150150

151151
The use of SVG images introduces a cross-site scripting risk as they can include JavaScript code. This JavaScript executes within the context of the page and can modify the page or the contents of the page. So, when considering the experience of rendering the icons, dapps need to take into consideration how they’ll approach handling these concerns in order to prevent an image from being used as an obfuscation technique to hide malicious modifications to the page or to other wallets.
152152

0 commit comments

Comments
 (0)