projecttwelve / airdrop-interface Goto Github PK
View Code? Open in Web Editor NEWP12 Genesis Soul-Bound NFT Airdrop
Home Page: https://airdrop.p12.games
License: GNU Affero General Public License v3.0
P12 Genesis Soul-Bound NFT Airdrop
Home Page: https://airdrop.p12.games
License: GNU Affero General Public License v3.0
add some game meme
play a portal animation after claim NFT successfully
add collab home card of airdrops
No response
A bug happened!
1.0.3 (Edge)
No response
No response
No response
iOS mobile portal video does not work, Android is fine, it is estimated that the problem of video format compatibility
1.0.3 (Edge)
No response
No response
For cheating accounts, only one token can be claimed!
add statistics on the count of gamer referral
iOS has disabled onload
function on iframe created using javascript, ref: niklasvh/html2canvas#2864
count the number of NFT claimed at diff levels.
No response
Enabling PUT & DELETE can have big security risks - allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.
The OPTIONS method can expose sensitive information that may help a malicious actor to prepare more advanced attacks.
Although there can be other factors needed to delete & upload files (depending on the config like Methods being handled by application code and not web server).
Its still not good thing to enable these Methods. Please disable the PUT,DELETE & OPTIONS.
1.0.2 (Default)
Chrome
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS,DELETE
show thousandths sign for number in the ranking
Description:
Clickjacking is an interface-based attack in which a user is tricked into clicking on actionable content on a hidden website by clicking on some other content in a decoy website. Consider the following example:
The Impact of Clickjacking:
The user assumes that they're entering their information into a usual form but they're actually entering it in fields the hacker has overlaid on the UI. Hackers will target passwords, seed words, emails and any other valuable data they can exploit.
Solutions:
X-Frame-Options: deny
Alternatively, framing can be restricted to the same origin as the website using the sameorigin directive
X-Frame-Options: sameorigin
or to a named website using the allow-from directive:
X-Frame-Options: allow-from https:// website . com
Content-Security-Policy: policy
The recommended clickjacking protection is to incorporate the frame-ancestors directive in the application's Content Security Policy. The frame-ancestors 'none' directive is similar in behavior to the X-Frame-Options deny directive. The frame-ancestors 'self' directive is broadly equivalent to the X-Frame-Options sameorigin directive. The following CSP whitelists frames to the same domain only:
Content-Security-Policy: frame-ancestors 'self';
Alternatively, framing can be restricted to named sites:
Content-Security-Policy: frame-ancestors normal- website . com;
1.0.2 (Default)
Chrome
No response
add sharing card, allow saving as an image
The amount of tokens that gamers can claim is based on various relevant metrics.
maybe end the round one at sometime
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.