Skip to content

Synchronize repository#265884

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:19d3c1fa-6aaf-4594-b536-0c0e8a543a8f
Jul 8, 2026
Merged

Synchronize repository#265884
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:19d3c1fa-6aaf-4594-b536-0c0e8a543a8f

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Append-only blocklist data with no application logic changes; main risk is a mistaken hostname blocking a legitimate site.

Overview
Automated sync appends 10 hostnames to the existing domain blocklist in src/config.json (the list already includes MetaMask/DeFi phishing sites).

New entries mix Arweave transaction URLs, typosquats like curvefinance.one, and names such as usdai.life and ethena.top. The only structural change is adding a trailing comma after echo-next-app.vercel.app so the JSON array stays valid.

Reviewed by Cursor Bugbot for commit 7d73907. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 8, 2026
@samczsun samczsun merged commit 5469fd3 into MetaMask:main Jul 8, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 19d3c1fa-6aaf-4594-b536-0c0e8a543a8f branch July 8, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants