-
-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: Warn users when connecting to a website on the eth-phishing-detect list on mobile #7491
Conversation
CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes. |
Codecov ReportAttention:
Additional details and impacted files
☔ View full report in Codecov by Sentry. |
Changes look good, I left some small feedbacks. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the caveat comment is a non-blocker. It would be interesting to investigate this further.
The rest of the code lgtm 🚀
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🚀
e04d7fe
to
02f5f3f
Compare
@blackdevelopa the PR looks good from QA. I can see the deceptive warning for malicious sites, and no warning for benign sites. deceptive-warning-wc.mp4no-warning-bening-site.mp4About the website icon, I am seeing a different icon from the one suggested in the dapp. I see that your icon is the expected one. We can investigate this further, as a separate issue though. |
Kudos, SonarCloud Quality Gate passed! |
Description
Currently users don't see any warning when connecting to a site on the eth-phishing-detect list using wallet connect. This PR checks if the url is flagged in the phishing controller and shows a warning banner when connecting to such site.
Manual testing steps
npx create-wc-dapp@latest web3modal-quickstart -id <PRPOJECT_ID> -y
src/pages/_app.tsx
, change the default url in to a flagged url from the phishing controllerBitrise: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/44a67e4f-4e42-4959-8cba-a9f25c45401b
Screenshots/Recordings
Before
RPReplay_Final1697220297.MP4
After
RPReplay_Final1697220988.MP4
Related issues
_Fixes https://github.com/MetaMask/MetaMask-planning/issues/1327
Pre-merge author checklist
Pre-merge reviewer checklist