Skip to content

Synchronize repository#265916

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:4b7cb91e-abd2-4b16-bf07-ba1b8ebab7a0
Jul 9, 2026
Merged

Synchronize repository#265916
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:4b7cb91e-abd2-4b16-bf07-ba1b8ebab7a0

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Single blocklist entry in static config with no application logic changes; low chance of unintended runtime impact beyond blocking that host.

Overview
Automated config sync that extends the domain denylist in src/config.json with app-debridge.github.io, alongside other phishing-style hosts (e.g. fake wallet and exchange domains).

Also fixes JSON formatting by adding a trailing comma after mail.trustwallet-verified.com so the new entry is valid in the array.

Reviewed by Cursor Bugbot for commit 6f74811. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 9, 2026
@samczsun samczsun merged commit 4b8d7fa into MetaMask:main Jul 9, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 4b7cb91e-abd2-4b16-bf07-ba1b8ebab7a0 branch July 9, 2026 00:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants