security: add prominent danger warning for eth_sign requests

2026-02-27 11:35:21 -08:00
parent 95314ff229
commit 13e2bdb0b0
3 changed files with 25 additions and 0 deletions
--- a/src/popup/views/approval.js
+++ b/src/popup/views/approval.js
@@ -294,6 +294,18 @@ function showSignApproval(details) {
        }
    }

+    // Display danger warning for eth_sign (raw hash signing)
+    const warningEl = $("approve-sign-danger-warning");
+    if (warningEl) {
+        if (sp.dangerWarning) {
+            warningEl.textContent = sp.dangerWarning;
+            warningEl.classList.remove("hidden");
+        } else {
+            warningEl.textContent = "";
+            warningEl.classList.add("hidden");
+        }
+    }
+
    $("approve-sign-password").value = "";
    $("approve-sign-error").classList.add("hidden");
    $("btn-approve-sign").disabled = false;