Skip to content

Synchronize repository#265885

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:778756b5-ac68-400b-8e48-aff6fa006c3e
Jul 8, 2026
Merged

Synchronize repository#265885
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:778756b5-ac68-400b-8e48-aff6fa006c3e

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Medium Risk
Dropping a blocklist entry changes runtime phishing detection for that domain; incorrect upstream removal could allow a malicious site to pass checks.

Overview
Automated sync updates src/config.json by removing gamdom.io from the domain blocklist consumed by @metamask/phishing-controller via checkDomain.

Domains that remain listed around that entry (e.g. swap.fyi, polar-tensor.com) are unchanged; only this one hostname drops off the list, so lookups for gamdom.io will no longer return a phishing hit from this config.

Reviewed by Cursor Bugbot for commit 8ff7b57. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 8, 2026
@samczsun samczsun merged commit 1140a40 into MetaMask:main Jul 8, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 778756b5-ac68-400b-8e48-aff6fa006c3e branch July 8, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants