Skip to content

bug: DomainWarningBanner auto-redirects without explicit user consent #436

Description

@nanaf6203-bit

Summary

src/components/DomainWarningBanner.tsx runs only client-side and exposes a redirect handler (window.location.href = 'https://propchain.io') without checking the current host.

Affected area

src/components/DomainWarningBanner.tsx (line ~95)

Steps to reproduce

If a clone or developer portal reuses the component, users with the wrong domain can be silently redirected to the production site, which is a UX surprise and possible spoofing vector.

Expected behaviour

Render a non-navigating warning panel with a manual "continue anyway" button gated behind an explicit user action and an aria-live announcement.

Acceptance criteria

  • Don't auto-navigate on suspicious domains.
  • Show a "Proceed only if you trust this site" button.
  • Add a screen-reader announcement.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Stellar WaveIssues in the Stellar wave programbugSomething isn't working correctlypriority/p1P1 — high priority, fix soonsecuritySecurity issue or hardening opportunity

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions