Skip to content

feat: Keychain - Add exclusion list to Keychain manifest #2079

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

jurevans
Copy link
Collaborator

@jurevans jurevans commented Jun 6, 2025

This PR introduces blacklisted matches to prevent content script injection on potentially malicious domains.

TODO Finish adding any missing patterns that could be mistaken for namadillo.app, and add any additional blacklisted patterns here.

Generated Chrome Manifest

example snippet

{
  "name": "Namada Keychain",
  "description": "The Namada Keychain manages a user's wallet for the Namada ecosystem.",
  "version": "0.6.0",
  "manifest_version": 3,
  "background": {
    "service_worker": "background.namada.js",
    "type": "module"
  },
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "content.namada.js"
      ],
      "exclude_glob": [
        "*://namadill0.app/*",
        "*://namadi1l0.app/*",
        "*://namadi1lo.app/*",
        "*://namadi110.app/*",
        "*://namadi11o.app/*",
        "*://namad1llo.app/*",
        "*://namad1ll0.app/*",
        "*://namad11lo.app/*",
        "*://namad111o.app/*",
        "*://namad1110.app/*",
        "*://nammadillo.app/*",
        "*://nammad1llo.app/*",
        "*://nammadi1lo.app/*",
        "*://nammadi11o.app/*",
        "*://nammadi110.app/*",
        "*://nammadill0.app/*",
        "*://nammadi1l0.app/*",
        "*://nammad1110.app/*"
      ]
    }
  ],
}

Generated Firefox Manifest

example snippet

{
  "name": "Namada Keychain",
  "description": "The Namada Keychain manages a user's wallet for the Namada ecosystem.",
  "version": "0.6.0",
  "manifest_version": 2,
  "browser_action": {
    "default_popup": "popup.html",
    "default_title": "Namada Keychain"
  },
  "background": {
    "scripts": [
      "background.namada.js"
    ],
    "persistent": true
  },
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "content.namada.js"
      ],
      "run_at": "document_start",
      "all_frames": true,
      "exclude_glob": [
        "*://namadill0.app/*",
        "*://namadi1l0.app/*",
        "*://namadi1lo.app/*",
        "*://namadi110.app/*",
        "*://namadi11o.app/*",
        "*://namad1llo.app/*",
        "*://namad1ll0.app/*",
        "*://namad11lo.app/*",
        "*://namad111o.app/*",
        "*://namad1110.app/*",
        "*://nammadillo.app/*",
        "*://nammad1llo.app/*",
        "*://nammadi1lo.app/*",
        "*://nammadi11o.app/*",
        "*://nammadi110.app/*",
        "*://nammadill0.app/*",
        "*://nammadi1l0.app/*",
        "*://nammad1110.app/*"
      ]
    }
  ],
}

@jurevans jurevans self-assigned this Jun 6, 2025
@jurevans jurevans added this to the Phase 4 milestone Jun 6, 2025
@jurevans jurevans force-pushed the feat/keychain-blacklist-matches branch from 2aa4959 to b0922ee Compare June 6, 2025 09:01
@jurevans jurevans force-pushed the feat/keychain-blacklist-matches branch from b0922ee to 0e3c984 Compare June 6, 2025 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant