|
|
b01df0639b
|
Merge branch 'main' into fix/high-severity-security
check / check (push) Successful in 21s
|
2026-02-27 20:56:09 +01:00 |
|
|
|
eec96f9054
|
security: clear decrypted secrets after use (best-effort)
check / check (push) Successful in 21s
|
2026-02-27 11:36:56 -08:00 |
|
|
|
f13cd0fd47
|
security: add TODO comments for password plaintext over runtime.sendMessage
|
2026-02-27 11:36:19 -08:00 |
|
|
|
b478d9efa9
|
security: validate sender URL for popup-only messages
|
2026-02-27 11:35:42 -08:00 |
|
|
|
d59ebfd461
|
security: derive RPC origin from sender instead of trusting msg.origin
|
2026-02-27 11:35:31 -08:00 |
|
|
|
13e2bdb0b0
|
security: add prominent danger warning for eth_sign requests
|
2026-02-27 11:35:21 -08:00 |
|
|
|
95314ff229
|
security: replace predictable sequential approval IDs with crypto.randomUUID()
|
2026-02-27 11:34:48 -08:00 |
|
|
|
1237cf8491
|
security: increase minimum password length from 8 to 12 characters
|
2026-02-27 11:34:32 -08:00 |
|
