PoCs Check

Guide
中文

Notifications Testing Guide

Summary Description

This guide tests whether Dapps in an Electron environment require permission to perform notification actions.

Vulnerability Identification

If clicking the "Show Notification" button on the page triggers a notification without requesting permission, there is a vulnerability.

Solution

It is recommended to alert users and request their authorization before executing popup notifications.