Skip to content

Synchronize repository#266720

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:e9162400-119c-4052-a3ea-98f90d691309
Jul 12, 2026
Merged

Synchronize repository#266720
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:e9162400-119c-4052-a3ea-98f90d691309

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 12, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Config-only blocklist expansion for phishing detection; no application logic changes.

Overview
Automated sync extends the phishing domain blocklist in config.json with two Wix Studio hosts impersonating MetaMask: global-metmask-ext.wixstudio.com and page-metasmaskweb.wixstudio.com. The trailing entry in the list is also fixed so JSON stays valid (comma after wollmetamask-help.gitbook.io).

Those domains feed the existing PhishingDetector via src/index.ts, so checks against them should now flag as phishing without other code changes.

Reviewed by Cursor Bugbot for commit f8a9f1f. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 12, 2026
@samczsun samczsun merged commit 9ae4067 into MetaMask:main Jul 12, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the e9162400-119c-4052-a3ea-98f90d691309 branch July 12, 2026 03:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants