prettier-config icon indicating copy to clipboard operation
prettier-config copied to clipboard

Insecure Schema FIle

Open Randy1Burrell opened this issue 2 years ago • 1 comments

I'm not sure I can trust this line

"$schema": "http://json.schemastore.org/prettierrc",

Since it is insecure, anyone can implement a MTM attack. No telling what they can insert in your code by doing that.

Randy1Burrell avatar Aug 17 '23 04:08 Randy1Burrell

Then update it to https. That's what I did.

dschach avatar Jun 13 '24 22:06 dschach