Merge pull request #14840 from MetaMask/master-sync
Sync `master` with `develop`feature/default_network_editable
Mark Stacey
3 years ago
committed by
GitHub
commit
43bd885be7
@ -1,150 +0,0 @@ |
||||
<!DOCTYPE html> |
||||
<html lang="en"> |
||||
<head> |
||||
<title>MetaMask Phishing Detection</title> |
||||
<script |
||||
src="./globalthis.js" |
||||
type="text/javascript" |
||||
charset="utf-8" |
||||
></script> |
||||
<script |
||||
src="./lockdown-install.js" |
||||
type="text/javascript" |
||||
charset="utf-8" |
||||
></script> |
||||
<script |
||||
src="./lockdown-run.js" |
||||
type="text/javascript" |
||||
charset="utf-8" |
||||
></script> |
||||
<script |
||||
src="./lockdown-more.js" |
||||
type="text/javascript" |
||||
charset="utf-8" |
||||
></script> |
||||
<script src="./phishing-detect.js"></script> |
||||
<link rel="stylesheet" type="text/css" href="./index.css" title="ltr" /> |
||||
<link |
||||
rel="stylesheet" |
||||
type="text/css" |
||||
href="./index-rtl.css" |
||||
title="rtl" |
||||
disabled |
||||
/> |
||||
<style> |
||||
* { |
||||
margin: 0; |
||||
padding: 0; |
||||
box-sizing: border-box; |
||||
} |
||||
body, |
||||
html { |
||||
background-color: var(--color-error-default); |
||||
display: flex; |
||||
flex-direction: column; |
||||
justify-content: center; |
||||
align-items: center; |
||||
font-family: Roboto, Arial, sans-serif; |
||||
width: 100vw; |
||||
min-height: 100vh; |
||||
} |
||||
.content { |
||||
display: flex; |
||||
flex-direction: column; |
||||
align-items: center; |
||||
width: 80%; |
||||
background-color: var(--color-background-default); |
||||
box-shadow: 0 0 15px #737373; |
||||
} |
||||
.content__header { |
||||
display: flex; |
||||
flex-direction: column; |
||||
align-items: center; |
||||
justify-content: center; |
||||
width: 100%; |
||||
color: var(--color-error-default); |
||||
border-bottom: 1px solid var(--color-border-default); |
||||
padding: 2em; |
||||
} |
||||
.content__header h1 { |
||||
font-size: 24px; |
||||
font-weight: normal; |
||||
} |
||||
.content__header h1 i { |
||||
margin-right: 0.25em; |
||||
} |
||||
.content__header img { |
||||
margin-bottom: 3em; |
||||
width: 130px; |
||||
} |
||||
.content__body { |
||||
background-color: var(--color-background-alternative); |
||||
font-size: 12pt; |
||||
color: var(--color-text-default); |
||||
} |
||||
.content__body p { |
||||
margin: 2em; |
||||
} |
||||
.content__body p a { |
||||
text-decoration: underline; |
||||
color: var(--color-primary-default); |
||||
cursor: pointer; |
||||
} |
||||
</style> |
||||
</head> |
||||
<body> |
||||
<div class="content"> |
||||
<div class="content__header"> |
||||
<img src="./images/logo/metamask-fox.svg" alt="MetaMask Logo" /> |
||||
<h1> |
||||
<i class="fa fa-exclamation-circle" aria-hidden="true"></i> |
||||
MetaMask Phishing Detection |
||||
</h1> |
||||
</div> |
||||
<div class="content__body"> |
||||
<p> |
||||
This domain is currently on the MetaMask domain warning list. This |
||||
means that based on information available to us, MetaMask believes |
||||
this domain could currently compromise your security and, as an added |
||||
safety feature, MetaMask has restricted access to the site. To |
||||
override this, please read the rest of this warning for instructions |
||||
on how to continue at your own risk. |
||||
</p> |
||||
<p> |
||||
There are many reasons sites can appear on our warning list, and our |
||||
warning list compiles from other widely used industry lists. Such |
||||
reasons can include known fraud or security risks, such as domains |
||||
that test positive on the |
||||
<a href="https://github.com/metamask/eth-phishing-detect" |
||||
>Ethereum Phishing Detector</a |
||||
>. Domains on these warning lists may include outright malicious |
||||
websites and legitimate websites that have been compromised by a |
||||
malicious actor. |
||||
</p> |
||||
<p> |
||||
To read more about this site |
||||
<a id="csdbLink" href="https://cryptoscamdb.org/search" |
||||
>please search for the domain on CryptoScamDB</a |
||||
>. |
||||
</p> |
||||
<p> |
||||
Note that this warning list is compiled on a voluntary basis. This |
||||
list may be inaccurate or incomplete. Just because a domain does not |
||||
appear on this list is not an implicit guarantee of that domain's |
||||
safety. As always, your transactions are your own responsibility. If |
||||
you wish to interact with any domain on our warning list, you can do |
||||
so by <a id="unsafe-continue">continuing at your own risk</a>. |
||||
</p> |
||||
<p> |
||||
If you think this domain is incorrectly flagged or if a blocked |
||||
legitimate website has resolved its security issues, |
||||
<a |
||||
id="new-issue-link" |
||||
href="https://github.com/metamask/eth-phishing-detect/issues/new" |
||||
>please file an issue</a |
||||
>. |
||||
</p> |
||||
</div> |
||||
</div> |
||||
</body> |
||||
</html> |
||||
@ -1,40 +0,0 @@ |
||||
import querystring from 'querystring'; |
||||
import PortStream from 'extension-port-stream'; |
||||
import browser from 'webextension-polyfill'; |
||||
import createRandomId from '../../shared/modules/random-id'; |
||||
import { setupMultiplex } from './lib/stream-utils'; |
||||
import { getEnvironmentType } from './lib/util'; |
||||
import ExtensionPlatform from './platforms/extension'; |
||||
|
||||
document.addEventListener('DOMContentLoaded', start); |
||||
|
||||
function start() { |
||||
const hash = window.location.hash.substring(1); |
||||
const suspect = querystring.parse(hash); |
||||
|
||||
const newIssueLink = document.getElementById('new-issue-link'); |
||||
const newIssueUrl = `https://github.com/MetaMask/eth-phishing-detect/issues/new`; |
||||
const newIssueParams = `?title=[Legitimate%20Site%20Blocked]%20${encodeURIComponent( |
||||
suspect.hostname, |
||||
)}&body=${encodeURIComponent(suspect.href)}`;
|
||||
newIssueLink.href = `${newIssueUrl}${newIssueParams}`; |
||||
|
||||
global.platform = new ExtensionPlatform(); |
||||
|
||||
const extensionPort = browser.runtime.connect({ |
||||
name: getEnvironmentType(), |
||||
}); |
||||
const connectionStream = new PortStream(extensionPort); |
||||
const mx = setupMultiplex(connectionStream); |
||||
const backgroundConnection = mx.createStream('controller'); |
||||
const continueLink = document.getElementById('unsafe-continue'); |
||||
continueLink.addEventListener('click', () => { |
||||
backgroundConnection.write({ |
||||
jsonrpc: '2.0', |
||||
method: 'safelistPhishingDomain', |
||||
params: [suspect.hostname], |
||||
id: createRandomId(), |
||||
}); |
||||
window.location.href = suspect.href; |
||||
}); |
||||
} |
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,20 @@ |
||||
<!doctype html> |
||||
<html lang="en"> |
||||
<head> |
||||
<title>Mock E2E Phishing Page</title> |
||||
</head> |
||||
<script type="text/javascript"> |
||||
function setIframeSource() { |
||||
const urlSearchParams = new URLSearchParams(window.location.search); |
||||
const params = Object.fromEntries(urlSearchParams.entries()); |
||||
const extensionUrl = new URL(params.extensionUrl); |
||||
document.getElementById('frame').src = `http://localhost:9999/#hostname=${encodeURIComponent(extensionUrl.hostname)}&href=${encodeURIComponent(extensionUrl.href)}`; |
||||
} |
||||
window.onload = setIframeSource; |
||||
</script> |
||||
<body> |
||||
<div>Hello</div> |
||||
<iframe id="frame" width=900 height=900> |
||||
</body> |
||||
|
||||
</html> |
||||
@ -0,0 +1,11 @@ |
||||
<!doctype html> |
||||
<html lang="en"> |
||||
<head> |
||||
<title>Mock E2E Phishing Page</title> |
||||
</head> |
||||
<body> |
||||
<div>Hello</div> |
||||
<iframe src="http://127.0.0.1:8081" width=900 height=900> |
||||
</body> |
||||
|
||||
</html> |
||||
@ -0,0 +1,58 @@ |
||||
const path = require('path'); |
||||
const createStaticServer = require('../../development/create-static-server'); |
||||
|
||||
const phishingWarningDirectory = path.resolve( |
||||
__dirname, |
||||
'..', |
||||
'..', |
||||
'node_modules', |
||||
'@metamask', |
||||
'phishing-warning', |
||||
'dist', |
||||
); |
||||
|
||||
class PhishingWarningPageServer { |
||||
constructor() { |
||||
this._server = createStaticServer(phishingWarningDirectory); |
||||
} |
||||
|
||||
async start({ port = 9999 } = {}) { |
||||
this._server.listen(port); |
||||
|
||||
let resolveStart; |
||||
let rejectStart; |
||||
const result = new Promise((resolve, reject) => { |
||||
resolveStart = resolve; |
||||
rejectStart = reject; |
||||
}); |
||||
this._server.once('listening', resolveStart); |
||||
this._server.once('error', rejectStart); |
||||
|
||||
try { |
||||
await result; |
||||
// clean up listener to ensure later errors properly bubble up
|
||||
this._server.removeListener('error', rejectStart); |
||||
} catch (error) { |
||||
this._server.removeListener('listening', resolveStart); |
||||
throw error; |
||||
} |
||||
} |
||||
|
||||
isRunning() { |
||||
return this._server.listening; |
||||
} |
||||
|
||||
async quit() { |
||||
await new Promise((resolve, reject) => |
||||
this._server.close((error) => { |
||||
if (error) { |
||||
reject(error); |
||||
} else { |
||||
resolve(); |
||||
} |
||||
}), |
||||
); |
||||
} |
||||
} |
||||
|
||||
module.exports = PhishingWarningPageServer; |
||||
Loading…
Reference in new issue