-
Notifications
You must be signed in to change notification settings - Fork 11
Closed
Labels
enhancementNew feature or requestNew feature or requestextensionsPhylum CLI extensionsPhylum CLI extensionsmedium priorityShould be handled as soon as possibleShould be handled as soon as possible
Milestone
Description
Currently when an extension asks for a URL permission which includes path elements, the entire URL will be printed (e.g. phylum.io/path/segments). However deno's extension system is solely based on exactly matching subdomain and domain, while ignoring any path segments.
To prevent extensions from tricking the user into granting unexpected permissions, we should strip the path segments when prompting for permissions to clearly communicate that everything under the domain will be accessible, regardless of path segments.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestextensionsPhylum CLI extensionsPhylum CLI extensionsmedium priorityShould be handled as soon as possibleShould be handled as soon as possible