harden: end a site's unremembered connection when its address or wallet is removed #416

Merged
clawbot merged 1 commits from issue-245-connected-sites-removal into next 2026-10-04 04:58:38 +02:00
1 Commits
Author SHA1 Message Date
sneak ed6f403334 harden: end a site's unremembered connection when its address or wallet is removed (closes #245)
check / check (push) Successful in 2m27s
e2e / e2e-chrome (push) Successful in 4m1s
e2e / e2e-firefox (push) Successful in 3m13s
A site connected without "Remember" lives only in the background's
in-memory connectedSites map. Removing an address or deleting a wallet
dropped the remembered permissions but never told the background; the
entry went only as a side effect of the accountsChanged broadcast, which
empties the whole map when the active address changes.

dropSitePermissions(), shared by both removal paths, now sends
AUTISTMASK_ADDRESSES_REMOVED with the removed addresses, and the
background deletes their entries. Only the extension's own pages may
send it.

Model: opus-5-5
2026-10-04 00:58:47 +00:00