1db0ee87ec
Update Eslint and deps ( #15293 )
2 years ago
1ec190bd8c
[FLASK] `snaps-skunkworks@0.18.1` ( #15230 )
...
* snaps-skunkworks@0.17.0
* Handle breaking changes
* Fix import
* Fix blocklist implementation
* snaps-skunkworks@0.18.0
* Fix lint
* Update LavaMoat policy
* Update iframe-execution-environment
* snaps-skunkworks@0.18.1
* Bump iframe-execution-environment
* Update LavaMoat policy
2 years ago
09164dcabb
Bump controllers v30.0.2 ( #14906 )
...
* bump @metamask/controllers to v30.0.2 and adapt
2 years ago
bc6c60cde1
Revert "Merge pull request #15063 from MetaMask/revert-v10.16.0"
...
This reverts commit 4d42715220f09ab88891
2 years ago
24662963c5
Revert "Merge pull request #15063 from MetaMask/revert-v10.16.0"
...
This reverts commit 4d42715220f09ab88891
2 years ago
925a19fa4a
Revert "Merge pull request #14912 from MetaMask/Version-v10.16.0"
...
This reverts commit f09ab88891effc761e0e
2 years ago
5a4b71b08b
Run lavamoat auto
2 years ago
82645ba516
[FLASK] snaps-skunkworks@0.16.0 ( #14952 )
...
* snaps-skunkworks@0.16.0
* Bump iframe-execution-environment
* Add getAppKey
* Regen LavaMoat policy
* Bump test-snaps
2 years ago
7d1259476b
Update smart-transactions-controller to v2.1.0 ( #14955 )
2 years ago
aae91c5596
Delete lavamoat patch
2 years ago
5a6f7541db
fix lavamoat policy files for drag and drop package ( #14901 )
2 years ago
15a962527a
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
2 years ago
78682ea9d2
fix lavamoat policy files for drag and drop package ( #14901 )
2 years ago
e79a900f54
Update LavaMoat policy
...
For some reason the last auto-generated policy included invalid
entries. Re-running the policy auto-generation command has fixed the
problem.
3 years ago
7ce4868401
snaps-skunkworks@0.15.0 ( #14772 )
...
* snaps-skunkworks@0.15.0
* Update patch
* Update tofu and LavaMoat policy
3 years ago
08490def8f
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
6dbb2c4ded
Migrate the "estimateGas" API call to "getFees" for STX ( #14767 )
3 years ago
25082ae272
Adding flag for MV3 ( #14762 )
3 years ago
66c049bb35
snaps-skunkworks@0.14.0 ( #14700 )
...
* snaps-skunkworks@0.13.0
* snaps-skunkworks@0.14.0
* Fix test
* Add long-running permission copy and icon
* Run linting
* Fix typo
* Bump E2E version
3 years ago
57e7d05bfa
Update Lavamoat policies
3 years ago
c2cd6f8097
Bump `addons-linter` ( #14717 )
...
* Bump addons-linter
* Deduplicate yarn.lock
* Rerun yarn install and LavaMoat policy gen
3 years ago
214211f847
Update Lavamoat policies
3 years ago
f4094925f0
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
23565cac2c
Bump @metamask/controllers version, remove patches ( #14618 )
3 years ago
8948018e5a
Ensure ledger keyring message event listener are removed on metamask lock ( #14691 )
...
* Ensure ledger keyring message event listener are removed on metamask lock
* Clean up
3 years ago
2dac88cbf4
snaps-skunkworks@0.12.0 ( #14670 )
...
* snaps-skunkworks@0.12.0
* Bump iframe execution environment
* Remove policy override
* Rerun LavaMoat
Co-authored-by: Erik Marks <25517051+rekmarks@users.noreply.github.com>
3 years ago
07da8ce589
LavaMoat - UI upgrade - secure package naming ( #14565 )
...
* lavamoat - update lavamoat-browserify to v15
* lavamoat/ui - unify override across build types
* lavamoat/ui - update policy overrides
* lavamoat - update to lavapack@3 to match lavamoat-browserify@15
* lavamoat - add missing policy
* lavamoat - add missing nanoid policy
* lavamoat - regenerate policy
* deps - update lock
* lavamoat - update policy
* lavamoat - update policy
3 years ago
32a82be2b6
[GridPlus] Updates Lattice-related modules to unlock functionality ( #14467 )
...
GridPlus has updated the EVM signing pathway in Lattice firmware,
which has not yet been released. Additionally, requesters can now
include ABI definitions with signing requests, which are used by
Lattice firmware to decode calldata in place.
All updates are backward compatable.
Updates:
* https://github.com/GridPlus/gridplus-sdk/compare/v1.1.6...v1.2.4
* https://github.com/GridPlus/eth-lattice-keyring/compare/v0.6.1...v0.7.3
3 years ago
7da6c66ea2
Added getAccounts suppressUnauthorized param ( #14126 )
...
* Added getAccounts suppressUnauthorized param
* Changed getAccounts supresss unauth param name
* Changed getAccounts param to object
* Fixed default empty obj for getAccounts getPermittedAccounts param
* Bump eth-json-rpc-middleware version to 8.0.2
* Fixed lavamoat policy
* Fixed lavamoat policies
* Fixed dedupe issues
* Fixed lavamoat allowscripts
* yarn deduplicate
* Fixed lavamoat policies
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
66bd172980
Lavamoat - protect all UI contexts ( #14537 )
...
* lavamoat - apply lavamoat protections to popup and notification
* build - enable lavamoat for home
* lavamoat - add missing ui overrides for react family
* deps/patches - patch zxcvbn for ses compat
3 years ago
1624af2364
snaps-skunkworks@0.11.1 ( #14531 )
...
* snaps-skunkworks@0.11.0
* Update LavaMoat policies
* Fix breaking changes
* Use SnapController:clearSnapState
* Fix fetch properly
* Bump iframe execution environment
* snaps-skunkworks@0.11.1
* Run allow-scripts auto
3 years ago
c9b00541cd
Updating lavamoat policies
3 years ago
cef95f8733
Stop storing request and response objects in the permission activity log ( #14485 )
...
We currently store the JSON-RPC request and response objects in the permission activity log. The utility of doing this was always rather dubious, but never problematic. Until now.
In Flask, as the restricted methods have expanded in number, user secrets may be included on JSON-RPC message objects. This PR removes these properties from the permission activity log, and adds a migration which does the same to existing log objects. We don't interact with the log objects anywhere in our codebase, but we don't want unexpected properties to cause errors in the future should any log objects be retained.
This PR also updates relevant tests and test data. It makes a minor functional change to how a request is designated as a success or failure, but this should not change any behavior in practice.
3 years ago
98f187c301
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
cc4de49e3e
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
d14c588404
[GridPlus] Updates SDK and Lattice keyring to fix several UX issues ( #14158 )
...
There were several issues related to a retry mechanism. The latest keyring
offers a significant speed and UX enhancement relative to the previous release.
For full details, see:
GridPlus/eth-lattice-keyring@v0.5.0...v0.6.1
3 years ago
3363cdcce1
Fix lavamoat policy
3 years ago
680d30f095
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
8df8f81df7
Deprecate extensionizer for webextension-polyfill ( #13960 )
...
* deprecate extensionizer for webextension-polyfill
* fix tests
* remove extensionizer
* fix browser windows api calls
* fix broken on firefox
* fix getAcceptLanguages call
* update more browser apis that are now promisified
* remove unnecessary console error ignoring in e2e tests
3 years ago
a3355d9ca5
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
118480280c
snaps-skunkworks@0.10.2 ( #13901 )
3 years ago
d7713a70ce
Revert "Update SRP representation"
...
This reverts commit c3feabf4de
3 years ago
259e30abc2
@metamask/controllers@26.0.0 ( #13867 )
...
* @metamask/controllers@26.0.0
3 years ago
c3feabf4de
Update SRP representation
...
An array of integers is now used to represent the SRP in three cases:
* In the import wallet flow, the UI uses it to pass the user-provided
SRP to the background (which converts the array to a buffer).
* In the create wallet flow, the UI uses it to retrieve the generated
SRP from the background.
* When persisting the wallet to state, the background uses it to
serialize the SRP.
Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com>
3 years ago
7ec8bd49c7
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
6206dbdfe4
[GridPlus] Updates Lattice dependencies ( #13834 )
3 years ago
58bdaf3c2a
Revert "Running yarn lavamoat:auto"
...
This reverts commit 7af8570a4e
3 years ago
a5fe919f68
Add EIP-712 support for Trezor ( #13693 )
...
* Add EIP-712 support for Trezor
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
* Update eth-trezor-keyring version
Co-authored-by: Alois Klink <alois.klink@gmail.com>
Co-authored-by: alisinabh <alisina.bm@gmail.com>
Co-authored-by: matejcik <ja@matejcik.cz>
Co-authored-by: Brandon Noad <Brandon.Noad@gmail.com>
3 years ago
7af8570a4e
Running yarn lavamoat:auto
3 years ago
676507a518
Run yarn lavamoat:auto
3 years ago
Brad Decker
Frederik Bolding
Alex Donesky
Dan Miller
Mark Stacey
seaona
Daniel
kumavis
Alex Miller
Jyoti Puri
ryanml
Shane
Erik Marks
Erik Marks