Skip to content
This repository has been archived by the owner on Sep 5, 2020. It is now read-only.

Eth 02 fixes #1483

Merged
merged 39 commits into from
Dec 6, 2016
Merged

Eth 02 fixes #1483

merged 39 commits into from
Dec 6, 2016

Conversation

frozeman
Copy link
Contributor

@frozeman frozeman commented Nov 30, 2016

Improves security in preloaders.

Fixes:

  • ETH-02-002
  • ETH-03-001

Moves mist API to preloader include.
Fixes callback issue in Mist API.

frozeman and others added 28 commits November 4, 2016 16:31
@mention-bot
Copy link

@frozeman, thanks! @luclu and @evertonfraga, please review this.

@evertonfraga
Copy link
Member

From the code standpoint: 👍. Looked at every non-merge commit and they all seem fine.

I'll test against the ETH fixes, maybe monday morning.

@@ -28,6 +28,7 @@ process.on('loaded',function () {


window.mist = mist();
window.mistMode = remote.getGlobal('mode');
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the mistMode shouldn't be exposed to dapps in browser.js.
We also don't want to require remote her, for security reasons.

The issue should be fixed in the wallet.js

position: 1,
permissions: {
admin: true
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@alexvandesande alexvandesande merged commit 3db4fe9 into develop Dec 6, 2016
@alexvandesande
Copy link
Collaborator

Security issues were tested.

@frozeman frozeman deleted the ETH-02-fixes branch December 6, 2016 15:04
@lock
Copy link

lock bot commented Mar 31, 2018

This thread has been automatically locked because it has not had recent activity. Please open a new issue for related bugs and link to relevant comments in this thread.

@lock lock bot locked and limited conversation to collaborators Mar 31, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants