Loading npm security reports…
Client library for StellarBroker service
During an explicitly confirmed trade, the client accepts transaction XDR from the broker WebSocket and signs it. invokeHostFunction operations bypass substantive validation, leaving the server-controlled transaction target and arguments unchecked.
src/tx-processor.js accepts every invokeHostFunction operation without validating its target or arguments.
src/tx-processor.jsView on unpkgsrc/client.js processes server-sent tx messages during trade and returns signed XDR.
src/client.jsView on unpkgsrc/tx-processor.js signs authorization payloads and transactions supplied by the broker server.
package.jsonView on unpkgsrc/tx-processor.js accepts every invokeHostFunction operation without validating its target or arguments.
src/tx-processor.jsView on unpkgsrc/client.js processes server-sent tx messages during trade and returns signed XDR.
src/client.jsView on unpkgsrc/tx-processor.js signs authorization payloads and transactions supplied by the broker server.
package.jsonView on unpkg · L5