Nostr Web Client

Please do not accept invalid events in your client. Do not accept non-integer "created_at" values, do not accept non-string-array on "tags", do not accept bech32-encoded keys as tag values. Every time you do that, Nostr dies a little.

For more information on how this kills Nostr, read https://fiatjaf.com/27598e6f.html

gandlaf21 2y ago

isn't that something the relays shouldn't accept either?

Reply to this note

Please Login to reply.

Discussion

fiatjaf 2y ago

I agree they should not. The untethr relay does not, same for strfry, I think. I'm not sure about nostr-rs-relay and Nostream.

denis2342 2y ago

first thing I added to lnurl-commando was checking that ID machtes the content and that the SIG matches the ID