All checks were successful
check / check (push) Successful in 13s
The MetaMask blocklist contains 2 entries with '*.' wildcard prefixes (e.g. *.coinbase-563513.com). These were stored literally and never matched because hostnameVariants() doesn't generate '*.' prefixed strings. Fix: normalizeDomain() strips the '*.' prefix at load time and during delta computation. The subdomain matching in hostnameVariants() already handles child domains correctly. Found during review.