Skip to content
This repository has been archived by the owner on Feb 26, 2020. It is now read-only.

Restrict dapp network access (add shell_requestWebAccess permission) #111

Open
axelchalon opened this issue May 17, 2018 · 0 comments
Open

Restrict dapp network access (add shell_requestWebAccess permission) #111

axelchalon opened this issue May 17, 2018 · 0 comments
Labels
F1-security The client fails to follow expected, security-sensitive, behaviour. F8-enhancement An additional feature request. M0 - general Issue affecting Parity UI overall P7-nicetohave Issue is worth doing eventually.

Comments

@axelchalon
Copy link
Contributor

By default, dapps should not be able to make web requests.
A dapp should ask the shell for permission to be able to access the Web, or certain domains.

This would prevent the dapp from being able to do much, even if it has access to critical data and gets compromised (injection for example).
@axelchalon axelchalon added F8-enhancement An additional feature request. P7-nicetohave Issue is worth doing eventually. M0 - general Issue affecting Parity UI overall labels May 17, 2018
@amaury1093 amaury1093 mentioned this issue May 23, 2018
Closed
@axelchalon axelchalon added the F1-security The client fails to follow expected, security-sensitive, behaviour. label Jun 24, 2018
@axelchalon axelchalon changed the title Add shell_requestWebAccess permission Restrict dapp network access (add shell_requestWebAccess permission) Jun 24, 2018
@axelchalon axelchalon changed the title Restrict dapp network access (add shell_requestWebAccess permission) Restrict dapp network/fs access (add shell_requestWebAccess permission) Jun 24, 2018
@axelchalon axelchalon changed the title Restrict dapp network/fs access (add shell_requestWebAccess permission) Restrict dapp network access (add shell_requestWebAccess permission) Aug 4, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
F1-security The client fails to follow expected, security-sensitive, behaviour. F8-enhancement An additional feature request. M0 - general Issue affecting Parity UI overall P7-nicetohave Issue is worth doing eventually.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@axelchalon