Add more secure check for snapshot url on TM signing

AmbireTech · Jul 1, 2024 · 2089dc6 · 2089dc6
1 parent 2f737f1
commit 2089dc6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/components/SignMessage/SignMessage.js b/src/components/SignMessage/SignMessage.js
@@ -73,7 +73,7 @@ export default function SignMessage({
     useStorage
   })
 
-  const isSnapshot = (_dappName, _txn) => _dappName && _dappName.toLowerCase().includes('snapshot') && _txn.domain && _txn.domain.name === 'snapshot'
+  const isSnapshot = (_dappName, _txn) => _dappName && _dappName.startsWith('https://snapshot.org') && _txn.domain && _txn.domain.name === 'snapshot'
   const isOkPermit2 = (_txn, _chainId) =>
     _txn.primaryType &&
     _txn.primaryType.toLowerCase().includes('permit') &&