b4663eb78b
Fixes MetaMask/metamask-extension#8626 - verifies password on requesting seed phrase ( #9063 )
4 years ago
21292a8ed1
update eth-token-tracker ( #9056 )
4 years ago
33430f6dea
Use content-hash@2.5.2 ( #9051 )
4 years ago
3c9a51d1af
@metamask/inpage-provider@6.1.0 ( #9046 )
4 years ago
a51c518d09
@metamask/inpage-provider@6.0.1 ( #9003 )
4 years ago
49c46c9ed2
Update `stylelint` from `v9.10.1` to `v13.6.1` ( #9001 )
...
The changes made between v9.10.1 and v13.6.1 don't appear to be
relevant to us, aside from bug fixes that we'd benefit from.
`gulp-stylelint` also needed to be updated, as it's in-step with
`stylelint`. It went from v7 to v13.0.0. The changes aren't notable
here for us either.
4 years ago
c9dfc62123
Fix stylelint ( #8169 )
...
* Stylelint: Ignore only top-level directories
The `.stylelintignore` entries lacked leading slashes, so most of the
UI code was ignored (because it fell under the `ui/app` directory, and
`app/` was ignored.
The leading slashes ensure only the intended top-level directories are
ignored.
* Simplify stylelint rules
We use the `stylelint-config-standard` rule-set, so most commonly-used
stylelint rules are inherited from that.
Some of the removed rules were redundant, some of them were more strict
than the rules in `standard` and we hadn't been following them in
practice, and some were obsolete.
* Convert stylelint config to JavaScript
JavaScript is a bit easier than JSON to work with, as it allows
comments.
This was also done to make it easier to merge in the `stylelint-config-
standard`, which is also in JavaScript.
* Inline `stylelint-config-standard`
I intend to go through each of these rules one-by-one, which is easier
with all of these rules inlined. Selectively overriding/disabling them
would have been messy.
* Comment out rules that aren't current working
These rules have been temporarily disabled. They will be re-renabled
one-by-one as they are fixed. This was done to make it easier to split
these changes among separate PRs, as many of the rules require
extensive functional changes.
* Add `stylelint` to `lint` script
`stylelint` is now run as part of the `lint` script. There is also a
separate `lint:styles` script for running just `stylelint`.
4 years ago
e713dd7698
Fix sort order of ethereumjs-block in yarn.lock ( #8985 )
...
Refs a2d0d6209#8979 )
This fixes the sort order of the yarn.lock file
4 years ago
4e7d999875
Dedupe fs-extras versions ( #8980 )
4 years ago
6b97cb8c5c
Use eslint-plugin-mocha@6.3.0 ( #8984 )
4 years ago
82f7b448d9
Dedupe find-cache-dir versions ( #8981 )
4 years ago
14c952b15c
Use eslint-plugin-import@2.22.0 ( #8983 )
4 years ago
a2d0d6209d
Dedupe ethereumjs-block versions ( #8979 )
4 years ago
4f0a205369
Use eslint@6.8.0 ( #8978 )
...
* Use eslint@6.8.0
* yarn lint:fix
4 years ago
07237e3dbf
Use extract-zip@1.7.0 ( #8977 )
4 years ago
6b9a3fb9a6
Use abortcontroller-polyfill@1.4.0 ( #8970 )
4 years ago
956dea91fb
Use gonzales-pe@4.3.0 ( #8971 )
4 years ago
0d8b399609
Use lodash@4.17.19 ( #8969 )
4 years ago
2856af2336
Remove integration tests ( #8959 )
...
The remaining integration tests are all covered by e2e tests, so
they're no longer needed.
All associated scripts, fixtures, and dependencies have also been
removed.
4 years ago
111bef2baa
Update `@metamask/test-dapp` to v3.1.0 ( #8963 )
...
This updated test dapp has a new `personal_sign` button. It also fixes
the `Encrypt` button, which was broken in `v3.0.0`.
The `signature-request` e2e test needed to be updated to find the
'Sign' button by id rather than by text, since there are now two
buttons with the text 'Sign'.
4 years ago
3cbcc913e9
update material-ui/core ( #8950 )
4 years ago
cd4903f65e
remove ramda ( #8932 )
4 years ago
88e33c8d79
Use lodash@4.17.17 ( #8940 )
4 years ago
14416a796a
add support for nullish coalescing ( #8935 )
4 years ago
f4c60df0c1
rpc-cap@3.0.1 ( #8929 )
4 years ago
8bc02d4b5e
rpc-cap@3.0.0 ( #8924 )
...
* rpc-cap@3.0.0
* adapt use of rpc-cap for new major version
4 years ago
2f2cf07ef5
eth-json-rpc-middleware@5.0.2 ( #8923 )
4 years ago
916edc64f0
@metamask/inpage-provider@6.0.0 ( #8921 )
4 years ago
b6504341bd
@metamask/test-dapp@3.0.0 ( #8902 )
4 years ago
d3aa9f8620
eth-keyring-controller@6.0.1 ( #8897 )
4 years ago
dd209c8fd2
@metamask/test-dapp@2.2.0 ( #8888 )
4 years ago
04198ec30a
update inpage provider ( #8872 )
...
Update `@metamask/inpage-provider` to v5.2.1
4 years ago
79e001b9ac
eth-contract-metadata@1.15.0 ( #8871 )
4 years ago
242db43700
Update inpage provider, deprecation warnings ( #8854 )
4 years ago
3bd4528d9d
Update test-dapp ( #8856 )
...
* update test-dapp
4 years ago
be3ac50791
Update eth-json-rpc-middleware ( #8847 )
5 years ago
04de9a92c5
Fix signing method bugs ( #8833 )
...
* update signTypedData validation
* update tests for new eth-json-rpc-middleware
* remove lowercasing of tx 'from' addresses
5 years ago
3673d69816
Use gulp-cli@2.3.0 ( #8845 )
5 years ago
2abbeadbfb
Use node-sass@4.14.1 ( #8844 )
...
This change updates our `node-sass` dependency to the latest version, 4.14.1.
This resolves two security advisories brought in by an outdated `yargs-parser`
subdependency.
See https://www.npmjs.com/advisories/1500 for more information.
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ node-sass │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ node-sass > sass-graph > yargs > yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-sass │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ gulp-sass > node-sass > sass-graph > yargs > yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
5 years ago
dc398191e0
Use @metamask/controllers@2.0.1 ( #8832 )
5 years ago
3f8fa161ca
Use markdown-to-jsx@6.11.4 ( #8809 )
...
This change updates the `markdown-to-jsx` dependency to the latest version,
resolving XSS security advisories.
See https://www.npmjs.com/advisories/1219 for more information.
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/addon-actions │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/addon-actions > @storybook/components > │
│ │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/addon-backgrounds │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/addon-backgrounds > @storybook/components > │
│ │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/addon-knobs │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/addon-knobs > @storybook/components > │
│ │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/core │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/core > @storybook/ui > @storybook/components > │
│ │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/react │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/react > @storybook/core > @storybook/ui > │
│ │ @storybook/components > markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/core │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/core > @storybook/ui > markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ Cross-Site Scripting │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=6.11.4 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/react │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/react > @storybook/core > @storybook/ui > │
│ │ markdown-to-jsx │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1219 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
5 years ago
2f50e9fd72
Restore timing function ( #8774 )
...
* restore and enhance the time est feature
background: we had a feature for showing a time estimate on pending txs
that was accidently removed during the redesign implementation. This PR
restores that feature and also enhances it:
1. Displays the time estimate on all views instead of just fullscreen
2. Uses Intl.RelativeTimeFormat to format the time
3. Adds a way to toggle the feature flag.
4. Uses a hook to calculate the time remaining instead of a component
* Update app/_locales/en/messages.json
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
* do not display on test nets
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
5 years ago
13d6803698
Adds the rule of hooks eslint rule ( #8779 )
5 years ago
c30da94a41
Bump websocket-extensions from 0.1.3 to 0.1.4 ( #8759 )
...
Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node ) from 0.1.3 to 0.1.4.
- [Release notes](https://github.com/faye/websocket-extensions-node/releases )
- [Changelog](https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md )
- [Commits](https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
5 years ago
21b7e42a75
Remove redundant entries from `yarn.lock`
...
For some reason, Yarn left these redundant entries in the lockfile
after merging `develop` into `master`.
5 years ago
9a624dd24c
Revert the revert of "LoginPerSite"
...
This reverts commit 466ece4588#7599 from MetaMask/Version-v7.7.0" (#7648 )"
This effectively re-introduces the changes from the "LoginPerSite" PR.
5 years ago
34fb525ce5
Limit Dapp permissions to primary account ( #8653 )
5 years ago
a0d64c7932
Implement new fullscreen design ( #8657 )
...
The fullscreen UI now shows roughly the same design as the popup UI.
A few additional changes depicted in the new fullscreen designs will
be implemented in subsequent PRs (e.g. the inline buttons on assets)
This was done now to make asset pages easier to implement. Implementing
asset pages solely for the popup UI would have been complicated by the
fact that we use viewport size to switch between the two layouts, so we
would have had to re-route upon resizing the window.
5 years ago
c0e32b54eb
Use @storybook/storybook-deployer@2.8.6 ( #8656 )
5 years ago
d989cbd8a6
Use concurrently@5.2.0 ( #8655 )
5 years ago
ryanml
Brad Decker
Whymarrh Whitby
Erik Marks
Mark Stacey
dependabot[bot]