Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New unprotected-update-current-contract-wasm documentation #304

Conversation

tomasavola
Copy link
Contributor

No description provided.

@tomasavola tomasavola added the documentation Improvements or additions to documentation label Aug 7, 2024
@tomasavola tomasavola self-assigned this Aug 7, 2024
Copy link

github-actions bot commented Aug 7, 2024

📘 Documentation Test Summary 📘

✅ The test build of the documentation has completed successfully!
📝 The changes will be published upon merge to the main branch.

- Detector: [`unprotected-update-current-contract-wasm`](https://github.com/CoinFabrik/scout-soroban/tree/main/detectors/unprotected-update-current-contract-wasm)
- Test Cases: [`unprotected-update-current-contract-wasm-1`](https://github.com/CoinFabrik/scout-soroban/tree/main/test-cases/unprotected-update-current-contract-wasm/unprotected-update-current-contract-wasm-1) [`unprotected-update-current-contract-wasm-2`](https://github.com/CoinFabrik/scout-soroban/tree/main/test-cases/unprotected-update-current-contract-wasm/unprotected-update-current-contract-wasm-2)

It warns you if `update_current_contract_wasm()` function is called without a previous check of the address of the caller. If users are allowed to call `update_current_contract_wasm()`, they can intentionally modify the contract behaviour, leading to the loss of all associated data/tokens and functionalities given by this contract or by others that depend on it.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sacar la oración "If users are allowed..." dado que es la misma que está en la sección "Why is this bad?"

@matiascabello matiascabello merged commit affa9a1 into main Aug 14, 2024
2 checks passed
@matiascabello matiascabello deleted the migrate-unprotected-update-current-contract-wasm-documentation branch August 14, 2024 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants