From 983069bd98e839300defb270b358f33ea27c349f Mon Sep 17 00:00:00 2001
From: Mahdi Yari <16903082+mahdiyari@users.noreply.github.com>
Date: Fri, 14 Feb 2025 19:39:40 +0330
Subject: [PATCH 1/3] fetch hivedex price and assets from the hivedex api

---
 index.html | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index 025d152..3bfff44 100644
--- a/index.html
+++ b/index.html
@@ -250,12 +250,14 @@ a {
         <img style="width: 35px; float: left; margin-top: -34px;" src="images/star.svg">-->
       </div>
       <div class="card-body">
-        <h1 class="card-title pricing-card-title">$ 1.49</h1>
+        <h1 class="card-title pricing-card-title" id="hivedex-price">$ 1.49</h1>
         <ul class="list-unstyled mt-3 mb-4">
           <li>Instant</li>
           <li>Anonymous</li>
           <li style="margin-top:8px;">Payments</li>
-          <li style="font-size: 0.85rem;">BTC, USDT, BUSD, LTC, BCH, XMR, BNB, DOGE</li>
+          <li style="font-size: 0.85rem;" id="hivedex-assets">
+            ETH, USDC, TRX, BNB, DOGE, LTC, XMR, USDT, TON, POL, BCH, SHIB, SOL, NOT, DOGS
+          </li>
         </ul>
       </div>
       <div class="card-footer">
@@ -605,6 +607,22 @@ a {
           return decodeURIComponent(name[1]);
   }
 
+  function fetchHivedexPrice() {
+    try {
+      fetch('https://api2.hivedex.io/price').then(res => res.json()).then(res => {
+        if ('price' in res && 'assets' in res && Array.isArray(res.assets)) {
+          document.getElementById('hivedex-price').innerHTML = `$ ${res.price}`
+          const assets = []
+          for (let i = 0; i < res.assets.length; i++) {
+            assets.push(res.assets[i].currency)
+          }
+          document.getElementById('hivedex-assets').innerHTML = assets.join(', ')
+        }
+      }).catch(_e => {})
+    } catch (_e) {}
+  }
+  fetchHivedexPrice()
+
 })();
 </script>
 </body>
-- 
GitLab


From 8c5ddf729dee99e7971f23de8f3e993a1fa01a60 Mon Sep 17 00:00:00 2001
From: Mahdi Yari <16903082+mahdiyari@users.noreply.github.com>
Date: Fri, 14 Feb 2025 19:46:30 +0330
Subject: [PATCH 2/3] Make sure price is a number

---
 index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.html b/index.html
index 3bfff44..db853fe 100644
--- a/index.html
+++ b/index.html
@@ -610,7 +610,7 @@ a {
   function fetchHivedexPrice() {
     try {
       fetch('https://api2.hivedex.io/price').then(res => res.json()).then(res => {
-        if ('price' in res && 'assets' in res && Array.isArray(res.assets)) {
+        if ('price' in res && 'assets' in res && Array.isArray(res.assets) && !isNaN(res.price)) {
           document.getElementById('hivedex-price').innerHTML = `$ ${res.price}`
           const assets = []
           for (let i = 0; i < res.assets.length; i++) {
-- 
GitLab


From 53079ed63fcf828d54e3d940d63f3f17adcbbe4c Mon Sep 17 00:00:00 2001
From: Mahdi Yari <16903082+mahdiyari@users.noreply.github.com>
Date: Fri, 14 Feb 2025 19:48:19 +0330
Subject: [PATCH 3/3] use textContent - safe against xss

---
 index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index db853fe..d127187 100644
--- a/index.html
+++ b/index.html
@@ -611,12 +611,12 @@ a {
     try {
       fetch('https://api2.hivedex.io/price').then(res => res.json()).then(res => {
         if ('price' in res && 'assets' in res && Array.isArray(res.assets) && !isNaN(res.price)) {
-          document.getElementById('hivedex-price').innerHTML = `$ ${res.price}`
+          document.getElementById('hivedex-price').textContent = `$ ${res.price}`
           const assets = []
           for (let i = 0; i < res.assets.length; i++) {
             assets.push(res.assets[i].currency)
           }
-          document.getElementById('hivedex-assets').innerHTML = assets.join(', ')
+          document.getElementById('hivedex-assets').textContent = assets.join(', ')
         }
       }).catch(_e => {})
     } catch (_e) {}
-- 
GitLab