solana

Problem

Solana CLI tools display user controlled input from various sources without any sanitization. A malicious user can craft input to include ANSI escape sequences, hijacking a victim's console and spoofing legitimate command output. Naturally leading to social attacks

Some affected sources of user-controlled text input

• Memo instructions
• Program logs
• Validator info

With an Open Edition the NFT supply must be infinite in order to list. However the number of NFTs displays as 0 as does the number of Winners. Further more it is set at a fixed price. In this example the fixed price is 0.5 SOL. Rather than display the fixed price number it displays the highest bid. There is no language describing how this auction works in that anyone who bids 0.5 will receive the

This is useful as different networks have different deployment requirements i.e. one would need to create a custom pyth oracle account on localnet but could use the existing pyth accounts on devnet.

Possible solutions:

1. Expose the cluster in anchor Provider
2. Pass in cluster to the user script

Hi,

The get_token_accounts_by_owner() function does not have the functionality to choose the encoding as optional argument, unlike in the official API function: https://docs.solana.com/developing/clients/jsonrpc-api#gettokenaccountsbyowner
In many other functions in the library this functionality is there, is there a possibility that this can also be added to this function? Thanks!

Should we implement a new event to make it easier for users to switch wallet?

The RPC allows batching of RPC requests, they should be submitted as an array of the serialized RPC requests.

Not sure where to put this, but trying to build the example page with sol-wallet-adapter 0.2.5 and anchor 0.11.1 gives a type mismatch.

Argument of type 'import("..../node_modules/@project-serum/sol-wallet-adapter/dist/cjs/index").default' is not assignable to parameter of type 'import(".../node_modules/@project-serum/anchor/dist/provider").Wallet'.
  Types of property 'publicKey' are

Invoking liquidate on healthy obligation should show detailed error message.