remove phishing domain whitelist support
All checks were successful
check / check (push) Successful in 13s

Remove all whitelist functionality from the phishing domain system.
The blocklist now only checks the blacklist — no whitelist overrides.

- Remove vendoredWhitelist and deltaWhitelist Sets
- Remove whitelist checks in isPhishingDomain()
- Remove whitelist from delta storage persistence
- Remove whitelist from loadConfig() delta computation
- Remove whitelist-specific test cases
- Update README to remove whitelist mention

Closes #114
This commit is contained in:
clawbot
2026-03-01 10:28:56 -08:00
committed by user
parent 293d781385
commit 06324158aa
3 changed files with 6 additions and 84 deletions

View File

@@ -803,8 +803,7 @@ small while ensuring fresh coverage of new phishing domains.
When a dApp on a blocklisted domain requests a wallet connection, transaction
approval, or signature, the approval popup displays a prominent red warning
banner alerting the user. The domain checker matches exact hostnames and all
parent domains (subdomain matching), with whitelist overrides for legitimate
sites that share a parent domain with a blocklisted entry.
parent domains (subdomain matching).
#### Transaction Decoding