11 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
clawbot	764ced687b	fix: add fallback popup window for tx and sign approval requests (closes #4) ... requestTxApproval and requestSignApproval were missing the openApprovalWindow fallback that requestApproval (connection requests) already had. When chrome.action.openPopup() fails (which it does when not triggered by a user gesture in MV3), no popup appeared — the user had to manually click the toolbar icon to find the confirmation screen. Now all three approval types use the same pattern: try openPopup() first, fall back to a centered standalone window.	2026-02-27 12:30:32 -08:00
clawbot	31b22c1325	style: format README.md and RULES.md with Prettier	2026-02-27 11:39:44 -08:00
clawbot	eec96f9054	security: clear decrypted secrets after use (best-effort)	2026-02-27 11:36:56 -08:00
clawbot	f13cd0fd47	security: add TODO comments for password plaintext over runtime.sendMessage	2026-02-27 11:36:19 -08:00
clawbot	b478d9efa9	security: validate sender URL for popup-only messages	2026-02-27 11:35:42 -08:00
clawbot	d59ebfd461	security: derive RPC origin from sender instead of trusting msg.origin	2026-02-27 11:35:31 -08:00
clawbot	13e2bdb0b0	security: add prominent danger warning for eth_sign requests	2026-02-27 11:35:21 -08:00
clawbot	95314ff229	security: replace predictable sequential approval IDs with crypto.randomUUID()	2026-02-27 11:34:48 -08:00
clawbot	1237cf8491	security: increase minimum password length from 8 to 12 characters	2026-02-27 11:34:32 -08:00
clawbot	afc4868001	docs: document Blockscout as third external service in README	2026-02-27 03:25:02 -08:00
clawbot	a6017ce32c	docs: add agent-protection notice to RULES.md	2026-02-27 03:25:01 -08:00