clawbot 5f54fcbb24 harden: end a site's unremembered connection when its address or wallet is removed (closes #245) ...

A site connected without "Remember" lives only in the background's
in-memory connectedSites map. Removing an address or deleting a wallet
dropped the remembered permissions but never told the background; the
entry went only as a side effect of the accountsChanged broadcast, which
empties the whole map when the active address changes.

dropSitePermissions(), shared by both removal paths, now sends
AUTISTMASK_ADDRESSES_REMOVED with the removed addresses, and the
background deletes their entries. Only the extension's own pages may
send it.

Model: opus-5-5

2026-10-04 04:58:38 +02:00

..

index.js

harden: end a site's unremembered connection when its address or wallet is removed (closes #245)

2026-10-04 04:58:38 +02:00

state.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00