funy bug about coinworks

[MattLawz]

Obviously, you are not meant to use it for that purpose.

[Nameless9000]

Obviously, you are not meant to use it for that purpose.

this can turn into a security issue if there is an open redirect on the qr code website or the blockchain website

[MattLawz]

Obviously, you are not meant to use it for that purpose.

this can turn into a security issue if there is an open redirect on the qr code website or the blockchain website

You literally cannot redirect anyone into a different site because there are no third-party untrusted sites that are being off-linked. The blockchain explorers won't display a random link as a valid address. In terms of the QR-Code, I have it set up to strictly the cryptocurrency type generation. So even if a malicious link was generated, it would not go anywhere if someone scanned it as it is using the crypto format: crypto:address, try scanning to my site with the BTC tag and tell me if it loads:

https://coinworks.club/btc/mattlawz.dev

(It will automatically open your cryptocurrency wallet...)

[MattLawz]

Also diving deeper into the QR-Code address generator, you can see on my generation link how I am exactly calling the pacific cryptocurrency: https://api.qrserver.com/v1/create-qr-code/?size=150x150&data=litecoin:

[MattLawz]

Adding onto the above:

coinworks/pages/ltc/[pid].tsx

Line 78 in b2426a5

<Image

[MattLawz]

Hope you understand the concept