Mark Stacey
925a19fa4a
Revert "Merge pull request #14912 from MetaMask/Version-v10.16.0"
...
This reverts commit f09ab88891
, reversing
changes made to effc761e0e
.
This is being temporarily reverted to make it easier to release an
urgent fix for v10.15.1.
2 years ago
seaona
5a4b71b08b
Run lavamoat auto
2 years ago
Dan J Miller
aae91c5596
Delete lavamoat patch
3 years ago
Alex Donesky
5a6f7541db
fix lavamoat policy files for drag and drop package ( #14901 )
3 years ago
kumavis
15a962527a
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
3 years ago
Alex Donesky
78682ea9d2
fix lavamoat policy files for drag and drop package ( #14901 )
3 years ago
Mark Stacey
e79a900f54
Update LavaMoat policy
...
For some reason the last auto-generated policy included invalid
entries. Re-running the policy auto-generation command has fixed the
problem.
3 years ago
Frederik Bolding
7ce4868401
snaps-skunkworks@0.15.0 ( #14772 )
...
* snaps-skunkworks@0.15.0
* Update patch
* Update tofu and LavaMoat policy
3 years ago
Alex Miller
08490def8f
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
Daniel
6dbb2c4ded
Migrate the "estimateGas" API call to "getFees" for STX ( #14767 )
3 years ago
Frederik Bolding
66c049bb35
snaps-skunkworks@0.14.0 ( #14700 )
...
* snaps-skunkworks@0.13.0
* snaps-skunkworks@0.14.0
* Fix test
* Add long-running permission copy and icon
* Run linting
* Fix typo
* Bump E2E version
3 years ago
ryanml
57e7d05bfa
Update Lavamoat policies
3 years ago
Frederik Bolding
c2cd6f8097
Bump `addons-linter` ( #14717 )
...
* Bump addons-linter
* Deduplicate yarn.lock
* Rerun yarn install and LavaMoat policy gen
3 years ago
ryanml
214211f847
Update Lavamoat policies
3 years ago
Dan J Miller
f4094925f0
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
Alex Donesky
23565cac2c
Bump @metamask/controllers version, remove patches ( #14618 )
3 years ago
Dan J Miller
8948018e5a
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
Frederik Bolding
2dac88cbf4
snaps-skunkworks@0.12.0 ( #14670 )
...
* snaps-skunkworks@0.12.0
* Bump iframe execution environment
* Remove policy override
* Rerun LavaMoat
Co-authored-by: Erik Marks <25517051+rekmarks@users.noreply.github.com>
3 years ago
kumavis
07da8ce589
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
3 years ago
Alex Miller
32a82be2b6
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
Shane
7da6c66ea2
Added getAccounts suppressUnauthorized param ( #14126 )
...
* Added getAccounts suppressUnauthorized param
* Changed getAccounts supresss unauth param name
* Changed getAccounts param to object
* Fixed default empty obj for getAccounts getPermittedAccounts param
* Bump eth-json-rpc-middleware version to 8.0.2
* Fixed lavamoat policy
* Fixed lavamoat policies
* Fixed dedupe issues
* Fixed lavamoat allowscripts
* yarn deduplicate
* Fixed lavamoat policies
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
kumavis
66bd172980
Lavamoat - protect all UI contexts ( #14537 )
...
* lavamoat - apply lavamoat protections to popup and notification
* build - enable lavamoat for home
* lavamoat - add missing ui overrides for react family
* deps/patches - patch zxcvbn for ses compat
3 years ago
Frederik Bolding
1624af2364
snaps-skunkworks@0.11.1 ( #14531 )
...
* snaps-skunkworks@0.11.0
* Update LavaMoat policies
* Fix breaking changes
* Use SnapController:clearSnapState
* Fix fetch properly
* Bump iframe execution environment
* snaps-skunkworks@0.11.1
* Run allow-scripts auto
3 years ago
ryanml
c9b00541cd
Updating lavamoat policies
3 years ago
Erik Marks
cef95f8733
Stop storing request and response objects in the permission activity log ( #14485 )
...
We currently store the JSON-RPC request and response objects in the permission activity log. The utility of doing this was always rather dubious, but never problematic. Until now.
In Flask, as the restricted methods have expanded in number, user secrets may be included on JSON-RPC message objects. This PR removes these properties from the permission activity log, and adds a migration which does the same to existing log objects. We don't interact with the log objects anywhere in our codebase, but we don't want unexpected properties to cause errors in the future should any log objects be retained.
This PR also updates relevant tests and test data. It makes a minor functional change to how a request is designated as a success or failure, but this should not change any behavior in practice.
3 years ago
Mark Stacey
98f187c301
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
Alex Miller
cc4de49e3e
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
Alex Miller
d14c588404
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
Erik Marks
3363cdcce1
Fix lavamoat policy
3 years ago
Erik Marks
680d30f095
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
Alex Donesky
8df8f81df7
Deprecate extensionizer for webextension-polyfill ( #13960 )
...
* deprecate extensionizer for webextension-polyfill
* fix tests
* remove extensionizer
* fix browser windows api calls
* fix broken on firefox
* fix getAcceptLanguages call
* update more browser apis that are now promisified
* remove unnecessary console error ignoring in e2e tests
3 years ago
Erik Marks
a3355d9ca5
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
Erik Marks
118480280c
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
ryanml
d7713a70ce
Revert "Update SRP representation"
...
This reverts commit c3feabf4de
.
3 years ago
Erik Marks
259e30abc2
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
Mark Stacey
c3feabf4de
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
Alex Miller
7ec8bd49c7
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
Alex Miller
6206dbdfe4
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
ryanml
58bdaf3c2a
Revert "Running yarn lavamoat:auto"
...
This reverts commit 7af8570a4e
.
3 years ago
Dan J Miller
a5fe919f68
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
ryanml
7af8570a4e
Running yarn lavamoat:auto
3 years ago
Dan Miller
676507a518
Run yarn lavamoat:auto
3 years ago
Alex Miller
6dcaa0dd97
[GridPlus] Updates corresponding to Lattice firmware v0.13.2 ( #13455 )
...
This updates `eth-lattice-keyring`, which itself updates `gridplus-sdk`.
These changes are backwards compatible but do unlock functionality in
Lattice firmware v0.13.2
Underlying Changes:
* `gridplus-sdk`: https://github.com/GridPlus/gridplus-sdk/compare/v0.9.2...v0.9.7
* `eth-lattice-keyring`: https://github.com/GridPlus/eth-lattice-keyring/compare/v0.4.0...v0.4.9
3 years ago
Dan J Miller
05138da8a7
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
Dan J Miller
96b82349a0
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
Dan J Miller
e817b2ab78
Run yarn lavamoat:auto ( #13697 )
3 years ago
Daniel
2585f45bde
Add support for Smart Transactions ( #12676 )
3 years ago
Erik Marks
35ac762e10
Add Snaps via Flask ( #13462 )
...
This PR adds `snaps` under Flask build flags to the extension. This branch is mostly equivalent to the current production version of Flask, excepting some bug fixes and tweaks.
Closes #11626
3 years ago
Mark Stacey
aaca267a7b
Update LavaMoat policy files
...
These changes were generated by running `yarn lavamoat:auto`
3 years ago
Alex Miller
79e96f93db
[GridPlus] Updates corresponding to Lattice firmware v0.13.2 ( #13455 )
...
This updates `eth-lattice-keyring`, which itself updates `gridplus-sdk`.
These changes are backwards compatible but do unlock functionality in
Lattice firmware v0.13.2
Underlying Changes:
* `gridplus-sdk`: https://github.com/GridPlus/gridplus-sdk/compare/v0.9.2...v0.9.7
* `eth-lattice-keyring`: https://github.com/GridPlus/eth-lattice-keyring/compare/v0.4.0...v0.4.9
3 years ago