2fa-notifier
2fa-notifier copied to clipboard
Verify URLs in dataset
The extension loads the URL when the notification is clicked. This could be bad if s malicious url gets into the data set. Include checks in the data pipeline to prevent this:
- doc url must match the domain url??
- check url against Pulsedive, safe browsing, and other url health services