New feature: detection of malicious code in blocks [XSS, SQL INJECTION, CSRF]

_src

In the past few weeks I found some XSS vulnerabilities in some Hive tools.
After reporting them to witnesses and devs that maintained those apps, I decided it would be helpful to add to @keys-defender's list of weapons the ability to timely detect potential code injection attempts. This should mitigate the issue of attackers targeting the Hive ecosystem of apps and tools.

This bot now uses the following to try to detect potential malicious code published in blocks:

~300 fragments of code for XSS (Cross Site Scripting)

~50 fragments of code for SQL injections

~20 fragments of code for CSRF (Cross Site Request Forgery) ...

These dictionaries will grow in size and be adjusted based on false positives.

_{Logs of the new code injection detection feature}

If the code injection is attempted in a post or comment (eg. this test comment of mine), the author will now receive an immediate reply from this bot:

_{Logs for code injection checks}

_{Example of @keys-defender's reply}

A notification is also immediately sent to my Discord server so that I or witnesses and volunteers in it can investigate and react accordingly to report and fix the targeted website or tool.

Clearly if a bad actor was indeed trying to compromise a website, their account name would also been known because, as per the blockchain design, past blocks cannot be edited or deleted.

_{Discord notification example}

A whitelist is also in use so that known Hive apps devs like @louis88 won't be bothered while testing dapps for vulnerabilities.

_{My own code injection attempt ignored because I'm on the whitelist}

Stay tuned for more updates and please feel free to suggest new features and improvements! 😎

---

---

---

---