Skip to content

Synchronize repository#265881

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:8853fbcd-8015-4117-985f-47d4bedfb281
Jul 8, 2026
Merged

Synchronize repository#265881
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:8853fbcd-8015-4117-985f-47d4bedfb281

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Single blocklist entry removal in synced config only; no application logic changes.

Overview
Automated config sync updates the domain blocklist in src/config.json by removing en-uphold-login-app.blogspot.com.by from the list.

No other entries in the diff change; related en-uphold-login-app hostnames on other TLDs stay blocked.

Reviewed by Cursor Bugbot for commit b73f1a5. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 8, 2026
@samczsun samczsun merged commit 4d5a2db into MetaMask:main Jul 8, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 8853fbcd-8015-4117-985f-47d4bedfb281 branch July 8, 2026 21:25

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Reviewed by Cursor Bugbot for commit b73f1a5. Configure here.

Comment thread src/config.json
"plametaryproperty.xyz",
"coinbase-cc.pages.dev",
"app-phantom-wallet-extension-for-edge.webflow.io",
"en-uphold-login-app.blogspot.com.by",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Known phishing domain removed from blocklist

High Severity

This change removes en-uphold-login-app.blogspot.com.by from the domain blocklist while many similar en-uphold-login-app.blogspot.* phishing domains remain. The domain is currently flagged as malicious by multiple security vendors, so this removal could allow users to reach a live phishing site.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit b73f1a5. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants