injectivelabs / docs Goto Github PK

Hey Team,
I'm a Security Researcher & a bug hunter,

Subdomain Takeover - DNS Misconfiguration

Here is a bug I have found that one of your domains is vulnerable to subdomain takeover which means anyone on the internet can take the domain & host malicious content there or even be used to steal customers' credentials

Vulnerable domain - shop.injective.com

The vulnerable domain has cname pointing to a Shopify instance which was not taken yet

For your reference I have taken over the domain shop.injective.com Kindly remove the cname pointing to Shopify

I have attached an image for your reference

Also reported via mail to [email protected] kindly check on emergent basis

Best,
Aman

Add Exchange docs (formulas/concepts from Notion)

@albertchon

Hey @nhannamsiu I think this error below was caused by this PR #23 can we have a look?

Looks like we need to update Ruby in that host.

Hey @ThomasRalee I was wondering if you could help me with 2 things on the API docs: https://api.injective.exchange/

1. Fix the favicon size to reflect exactly what we have in other products
   
2. See if it's possible to remove the bold from the sub-headers. For instance, - InjectiveAccountsRPC, - Derivatives etc., these are in an MD file as headers and by default headers are bold but maybe we can fix this with some CSS?
   

Not a priority at all, when you're free! Thanks :)

Bug Description
The current order message format is outdated, as it doesn't contain the subaccountID of the trader in the order message format.

It would also be useful to explicitly specify the full order message format for each order type (stop loss, take profit, netting) to reduce ambiguity as well.

@gorgos @bshevchenko

The current docs only describe the order message format/order types but don't provide easy code examples that developers can follow to create orders/place trades.

It would be helpful to provide side-by-side code snippets from the Injective-SDK to allow the trader to easily to do this.

See docs.dydx.exchange for a good example of this.

The existing documentation for Relayer API examples, joining the testnet and Hosting RelayerAPI are outdated, particularly given the recent naming changes, deployment of new endpoints, and new Exchange API rearchitecture.

It would be useful to have up-to-date information on this front (along with new injectived, injective-cli, injective-api and injective-exchange binaries) to allow third party developers to better understand Injective as well as potentially self-host the Injective chain node.

@xlab