Fix: set_token_standard() has update_authority unneccessarily set to mutable

[billythedummy]

This results in writable privilege escalation for e.g. when CPI-ing SetTokenStandard using anchor_spl with an immutable update_authority AccountInfo

[samuelvanderwaal]

Thanks for the fix! You also need to remove the writable annotation from SetTokenStandard's update_authority account in src/instruction/mod.rs so the autogenerated JS lib also has this change. After that run yarn api:gen in the JS directory and push and then it should be good to be merged.

[billythedummy]

Thanks for the fix! You also need to remove the writable annotation from SetTokenStandard's update_authority account in src/instruction/mod.rs so the autogenerated JS lib also has this change. After that run yarn api:gen in the JS directory and push and then it should be good to be merged.

done

[blockiosaurus]

Looks good, thank you for catching this!

[danenbm]

LGTM