7d1259476b
Update smart-transactions-controller to v2.1.0 ( #14955 )
2 years ago
5a6f7541db
fix lavamoat policy files for drag and drop package ( #14901 )
3 years ago
15a962527a
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
3 years ago
78682ea9d2
fix lavamoat policy files for drag and drop package ( #14901 )
3 years ago
e79a900f54
Update LavaMoat policy
...
For some reason the last auto-generated policy included invalid
entries. Re-running the policy auto-generation command has fixed the
problem.
3 years ago
7ce4868401
snaps-skunkworks@0.15.0 ( #14772 )
...
* snaps-skunkworks@0.15.0
* Update patch
* Update tofu and LavaMoat policy
3 years ago
08490def8f
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
6dbb2c4ded
Migrate the "estimateGas" API call to "getFees" for STX ( #14767 )
3 years ago
66c049bb35
snaps-skunkworks@0.14.0 ( #14700 )
...
* snaps-skunkworks@0.13.0
* snaps-skunkworks@0.14.0
* Fix test
* Add long-running permission copy and icon
* Run linting
* Fix typo
* Bump E2E version
3 years ago
57e7d05bfa
Update Lavamoat policies
3 years ago
c2cd6f8097
Bump `addons-linter` ( #14717 )
...
* Bump addons-linter
* Deduplicate yarn.lock
* Rerun yarn install and LavaMoat policy gen
3 years ago
214211f847
Update Lavamoat policies
3 years ago
f4094925f0
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
23565cac2c
Bump @metamask/controllers version, remove patches ( #14618 )
3 years ago
8948018e5a
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
2dac88cbf4
snaps-skunkworks@0.12.0 ( #14670 )
...
* snaps-skunkworks@0.12.0
* Bump iframe execution environment
* Remove policy override
* Rerun LavaMoat
Co-authored-by: Erik Marks <25517051+rekmarks@users.noreply.github.com>
3 years ago
07da8ce589
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
3 years ago
32a82be2b6
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
7da6c66ea2
Added getAccounts suppressUnauthorized param ( #14126 )
...
* Added getAccounts suppressUnauthorized param
* Changed getAccounts supresss unauth param name
* Changed getAccounts param to object
* Fixed default empty obj for getAccounts getPermittedAccounts param
* Bump eth-json-rpc-middleware version to 8.0.2
* Fixed lavamoat policy
* Fixed lavamoat policies
* Fixed dedupe issues
* Fixed lavamoat allowscripts
* yarn deduplicate
* Fixed lavamoat policies
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
66bd172980
Lavamoat - protect all UI contexts ( #14537 )
...
* lavamoat - apply lavamoat protections to popup and notification
* build - enable lavamoat for home
* lavamoat - add missing ui overrides for react family
* deps/patches - patch zxcvbn for ses compat
3 years ago
1624af2364
snaps-skunkworks@0.11.1 ( #14531 )
...
* snaps-skunkworks@0.11.0
* Update LavaMoat policies
* Fix breaking changes
* Use SnapController:clearSnapState
* Fix fetch properly
* Bump iframe execution environment
* snaps-skunkworks@0.11.1
* Run allow-scripts auto
3 years ago
c9b00541cd
Updating lavamoat policies
3 years ago
cef95f8733
Stop storing request and response objects in the permission activity log ( #14485 )
...
We currently store the JSON-RPC request and response objects in the permission activity log. The utility of doing this was always rather dubious, but never problematic. Until now.
In Flask, as the restricted methods have expanded in number, user secrets may be included on JSON-RPC message objects. This PR removes these properties from the permission activity log, and adds a migration which does the same to existing log objects. We don't interact with the log objects anywhere in our codebase, but we don't want unexpected properties to cause errors in the future should any log objects be retained.
This PR also updates relevant tests and test data. It makes a minor functional change to how a request is designated as a success or failure, but this should not change any behavior in practice.
3 years ago
98f187c301
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
cc4de49e3e
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
d14c588404
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
3363cdcce1
Fix lavamoat policy
3 years ago
680d30f095
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
8df8f81df7
Deprecate extensionizer for webextension-polyfill ( #13960 )
...
* deprecate extensionizer for webextension-polyfill
* fix tests
* remove extensionizer
* fix browser windows api calls
* fix broken on firefox
* fix getAcceptLanguages call
* update more browser apis that are now promisified
* remove unnecessary console error ignoring in e2e tests
3 years ago
a3355d9ca5
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
118480280c
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
d7713a70ce
Revert "Update SRP representation"
...
This reverts commit c3feabf4de
3 years ago
259e30abc2
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
c3feabf4de
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
7ec8bd49c7
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
6206dbdfe4
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
58bdaf3c2a
Revert "Running yarn lavamoat:auto"
...
This reverts commit 7af8570a4e
3 years ago
a5fe919f68
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
7af8570a4e
Running yarn lavamoat:auto
3 years ago
676507a518
Run yarn lavamoat:auto
3 years ago
6dcaa0dd97
[GridPlus] Updates corresponding to Lattice firmware v0.13.2 ( #13455 )
...
This updates `eth-lattice-keyring`, which itself updates `gridplus-sdk`.
These changes are backwards compatible but do unlock functionality in
Lattice firmware v0.13.2
Underlying Changes:
* `gridplus-sdk`: https://github.com/GridPlus/gridplus-sdk/compare/v0.9.2...v0.9.7
* `eth-lattice-keyring`: https://github.com/GridPlus/eth-lattice-keyring/compare/v0.4.0...v0.4.9
3 years ago
05138da8a7
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
96b82349a0
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
e817b2ab78
Run yarn lavamoat:auto ( #13697 )
3 years ago
2585f45bde
Add support for Smart Transactions ( #12676 )
3 years ago
35ac762e10
Add Snaps via Flask ( #13462 )
...
This PR adds `snaps` under Flask build flags to the extension. This branch is mostly equivalent to the current production version of Flask, excepting some bug fixes and tweaks.
Closes #11626
3 years ago
aaca267a7b
Update LavaMoat policy files
...
These changes were generated by running `yarn lavamoat:auto`
3 years ago
79e96f93db
[GridPlus] Updates corresponding to Lattice firmware v0.13.2 ( #13455 )
...
This updates `eth-lattice-keyring`, which itself updates `gridplus-sdk`.
These changes are backwards compatible but do unlock functionality in
Lattice firmware v0.13.2
Underlying Changes:
* `gridplus-sdk`: https://github.com/GridPlus/gridplus-sdk/compare/v0.9.2...v0.9.7
* `eth-lattice-keyring`: https://github.com/GridPlus/eth-lattice-keyring/compare/v0.4.0...v0.4.9
3 years ago
241ee2f1d9
Fix policies
3 years ago
4124445a06
Run yarn lavamoat:auto
3 years ago
Daniel
Alex Donesky
kumavis
Mark Stacey
Frederik Bolding
Alex Miller
ryanml
Dan J Miller
Shane
Erik Marks
Erik Marks