AutistMask

307 Commits 25 Branches 1 Tag

3 Commits

Author	SHA1	Message	Date
clawbot	6bafb18ebd	fix: strip wildcard prefixes from vendored blocklist entries check / check (push) Successful in 13s Details The MetaMask blocklist contains 2 entries with '.' wildcard prefixes (e.g. .coinbase-563513.com). These were stored literally and never matched because hostnameVariants() doesn't generate '.' prefixed strings. Fix: normalizeDomain() strips the '.' prefix at load time and during delta computation. The subdomain matching in hostnameVariants() already handles child domains correctly. Found during review.	2026-03-01 07:38:01 -08:00
clawbot	0d06df6cbe	refactor: vendor phishing blocklist, delta-only in-memory updates check / check (push) Successful in 25s Details Vendor the MetaMask eth-phishing-detect config.json (231k domains) into src/data/phishing-domains.json as the baseline blocklist shipped with the extension. On 24h refresh, only the delta (new domains not in the vendored snapshot) is kept in memory. Domain checks hit the in-memory delta first (fresh scam sites), then binary-search the vendored sorted array. If the delta is under 256 KiB it is persisted to chrome.storage.local so it survives service-worker restarts without re-fetching. Removes the previous approach of downloading and holding the full blocklist in memory as a Set.	2026-03-01 07:33:10 -08:00
clawbot	b8d81a4c8a	fix: etherscan label check runs for contracts, UI displays etherscan-phishing warnings check / check (push) Successful in 10s Details Bug 1: getFullWarnings returned early for contract addresses, skipping checkEtherscanLabel. Restructured to use isContract flag so the Etherscan check runs for all addresses (contracts are often the most dangerous). Bug 2: confirmTx.js only handled 'contract' and 'new-address' warning types, silently discarding 'etherscan-phishing'. Added confirm-etherscan-warning HTML element and handler in the async warnings loop. Style: converted inline style attributes on phishing warning banners (approve-tx, approve-sign, approve-site) to Tailwind utility classes (bg-red-100 text-red-800 border-2 border-red-600 rounded-md).	2026-03-01 05:11:54 -08:00

Author

SHA1

Message

Date

clawbot

6bafb18ebd

fix: strip wildcard prefixes from vendored blocklist entries

check / check (push) Successful in 13s

Details

The MetaMask blocklist contains 2 entries with '*.' wildcard prefixes
(e.g. *.coinbase-563513.com). These were stored literally and never
matched because hostnameVariants() doesn't generate '*.' prefixed
strings. Fix: normalizeDomain() strips the '*.' prefix at load time
and during delta computation. The subdomain matching in
hostnameVariants() already handles child domains correctly.

Found during review.

2026-03-01 07:38:01 -08:00

clawbot

0d06df6cbe

refactor: vendor phishing blocklist, delta-only in-memory updates

check / check (push) Successful in 25s

Details

Vendor the MetaMask eth-phishing-detect config.json (231k domains) into
src/data/phishing-domains.json as the baseline blocklist shipped with
the extension.

On 24h refresh, only the delta (new domains not in the vendored snapshot)
is kept in memory. Domain checks hit the in-memory delta first (fresh
scam sites), then binary-search the vendored sorted array.

If the delta is under 256 KiB it is persisted to chrome.storage.local
so it survives service-worker restarts without re-fetching.

Removes the previous approach of downloading and holding the full
blocklist in memory as a Set.

2026-03-01 07:33:10 -08:00

clawbot

b8d81a4c8a

fix: etherscan label check runs for contracts, UI displays etherscan-phishing warnings

check / check (push) Successful in 10s

Details

Bug 1: getFullWarnings returned early for contract addresses, skipping
checkEtherscanLabel. Restructured to use isContract flag so the Etherscan
check runs for all addresses (contracts are often the most dangerous).

Bug 2: confirmTx.js only handled 'contract' and 'new-address' warning types,
silently discarding 'etherscan-phishing'. Added confirm-etherscan-warning
HTML element and handler in the async warnings loop.

Style: converted inline style attributes on phishing warning banners
(approve-tx, approve-sign, approve-site) to Tailwind utility classes
(bg-red-100 text-red-800 border-2 border-red-600 rounded-md).

2026-03-01 05:11:54 -08:00