I have a website with NODEJS and it's a Dapp.
There is some button to click and open MetaMask for signing a transaction.
I think an attacker car replace my ABI+Contract address and inject them with his contract and ABI. So if he take advantage of it, he can redirect ETH fund to his own benefit.
Is there any security to avoid this ?