6 Commits

Include renames

Author	SHA1	Message	Date
clawbot	6bafb18ebd	fix: strip wildcard prefixes from vendored blocklist entries ... The MetaMask blocklist contains 2 entries with '*.' wildcard prefixes (e.g. *.coinbase-563513.com). These were stored literally and never matched because hostnameVariants() doesn't generate '*.' prefixed strings. Fix: normalizeDomain() strips the '*.' prefix at load time and during delta computation. The subdomain matching in hostnameVariants() already handles child domains correctly. Found during review.	2026-03-01 07:38:01 -08:00
clawbot	0d06df6cbe	refactor: vendor phishing blocklist, delta-only in-memory updates ... Vendor the MetaMask eth-phishing-detect config.json (231k domains) into src/data/phishing-domains.json as the baseline blocklist shipped with the extension. On 24h refresh, only the delta (new domains not in the vendored snapshot) is kept in memory. Domain checks hit the in-memory delta first (fresh scam sites), then binary-search the vendored sorted array. If the delta is under 256 KiB it is persisted to chrome.storage.local so it survives service-worker restarts without re-fetching. Removes the previous approach of downloading and holding the full blocklist in memory as a Set.	2026-03-01 07:33:10 -08:00
user	01839d9c47	feat: add Etherscan label scraping and MetaMask phishing domain blocklist ... - Add etherscanLabels module: scrapes Etherscan address pages for phishing/scam labels (Fake_Phishing*, Exploiter, scam warnings). Integrated as best-effort async check in addressWarnings. - Add phishingDomains module: fetches MetaMask's eth-phishing-detect blocklist (~231K domains) at runtime, caches in memory, refreshes every 24h. Checks hostnames with subdomain matching and whitelist overrides. - Integrate domain phishing checks into all approval flows: connection requests, transaction approvals, and signature requests show a prominent red warning banner when the requesting site is on the MetaMask blocklist. - Add unit tests for both modules (12 tests for etherscanLabels parsing, 15 tests for phishingDomains matching). Closes #114	2026-03-01 05:03:42 -08:00
clawbot	3c2d553070	test: add V4 swap ERC20→ERC20 decoder regression test ... Adds a test that constructs a Uniswap V4 USDT→USDC swap using SETTLE/SWAP_EXACT_IN_SINGLE/TAKE sub-actions inside a V4_SWAP command. Without decodeV4Swap(), the output token would be unresolvable and the swap name would not show 'USDT → USDC'. This test fails on the old code and passes with the decodeV4Swap() fix. Refs: #59	2026-02-28 11:22:14 -08:00
sneak	9e45c75d29	Implement personal_sign and eth_signTypedData_v4 message signing ... Replace stub error handlers with full approval flow for personal_sign, eth_sign, eth_signTypedData_v4, and eth_signTypedData. Uses toolbar popup only (no fallback window) and keeps sign approvals pending across popup close/reopen cycles so the user can respond via the toolbar icon.	2026-02-27 15:27:14 +07:00
sneak	065f0eaa81	Add project scaffolding ... Makefile, Dockerfile, CI workflow, prettier config, manifests for Chrome (MV3) and Firefox (MV2), source directory structure, and minimal test suite. All checks pass.	2026-02-24 09:48:21 +07:00