Merge branch 'main' into feat/mpsc0x/added-aptos

Author: mpsc0x

package.json

@@ -138,6 +138,7 @@
     "jest-environment-jsdom": "^29.7.0",
     "lint-staged": "^13.0.3",
     "prettier": "^2.8.1",
+    "svgo": "^4.0.0",
     "typescript": "^5.0.4"
   },
   "contributors": [
@@ -163,4 +164,4 @@
     "budgetPercentIncreaseRed": 20,
     "showDetails": true
   }
-}
+}

pages/api/rpc-proxy.ts

@@ -116,8 +116,8 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
       // Expected body: { chainId, method: 'GET' | 'POST', path: string, body?: object }
       const { method, path, body } = req.body;
 
-      if (!path) {
-        return res.status(400).json({ error: 'Missing "path" for Aptos request' });
+      if (!path || !path.startsWith('/') || path.includes('..')) {
+        return res.status(400).json({ error: 'Invalid path for Aptos request' });
       }
 
       const aptosUrl = `${rpcUrl}/v1${path}`;