Skip to content

Path segment should be removed when prompting for permissions #519

@cd-work

Description

@cd-work

Currently when an extension asks for a URL permission which includes path elements, the entire URL will be printed (e.g. phylum.io/path/segments). However deno's extension system is solely based on exactly matching subdomain and domain, while ignoring any path segments.

To prevent extensions from tricking the user into granting unexpected permissions, we should strip the path segments when prompting for permissions to clearly communicate that everything under the domain will be accessible, regardless of path segments.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestextensionsPhylum CLI extensionsmedium priorityShould be handled as soon as possible

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions