4 Commits

Include renames

Author	SHA1	Message	Date
sneak	8d35741af9	fix: the typed data screen shows only the message fields that are signed (closes #539) ... ethers signs only the fields a type declares and drops any other key, but the Message section listed every key the site sent, so an added key read as signed. The Message section now follows the signed type, at every level of nesting and in the type's order. Typed data with other keys is not refused: those keys are listed after the message under "Not part of the signature", by their place in the message. README SignApproval says so. The operator/spender test now also checks the Message section, and new tests cover an added key in a nested struct and in a list item. Model: opus-5-5	2026-10-14 07:54:56 +00:00
clawbot	83f3549d37	fix: typed data for another chain cannot be signed (closes #519) ... EIP-712 has a wallet refuse typed data whose domain chainId is not the active chain, because the signature is valid on the chain it names. The sign screen now shows such a request with the reason on its error line and Sign disabled, the same way it refuses a mismatched primary type. The background checks again when the signature comes back, against the network active then, and answers the site with that refusal instead of the signature. A chain id is read as ethers signs it, so 1, "1" and "0x1" are one chain. Typed data with no chainId signs as before. Model: opus-5-5	2026-10-14 08:31:44 +02:00
clawbot	1144fdb71b	harden: key remembered site permissions by full origin (closes #402) ... allowedSites and deniedSites held the bare hostname, so a grant to https://dapp.example also authorised http://dapp.example and every port on that host, and the connection, transaction and signature prompts named only the hostname. Both lists now store and match the full origin (scheme://host[:port]), the key the connections approved without Remember already used. The prompts, the Settings site lists and AUTISTMASK_REMOVE_SITE use the origin too. Entries saved by hostname are not migrated (pre-1.0): they match no site. Model: opus-5-5	2026-10-04 18:09:04 +02:00
clawbot	6c70a82de8	harden: warn for token-permission typed data and show the primary type ethers signs (closes #400) ... The typed-data screen listed a Permit or Permit2 signature as plain key/value lines, like a sign-in message. It now shows a red warning naming the spender and each token and amount, read only from the fields the signed type declares (a Permit's token is the domain's verifyingContract); anything those fields do not give reads Unknown. The screen printed the page's primaryType, but ethers signs the type it derives from types. It now shows that type and refuses typed data whose stated type is missing or differs: Sign disabled, checked again where signing starts. Deviation: the warning names no deadline or expiry; see the issue. Judgement call: DAI's older permit and Permit2's batch and witness transfer types are recognised too. Model: opus-5-5	2026-10-04 02:24:50 +02:00