Skip to content
  • Martin Holst Swende's avatar
    d3441ebb
    cmd/clef, signer: security fixes (#17554) · d3441ebb
    Martin Holst Swende authored
    * signer: remove local path disclosure from extapi
    
    * signer: show more data in cli ui
    
    * rpc: make http server forward UA and Origin via Context
    
    * signer, clef/core: ui changes + display UA and Origin
    
    * signer: cliui - indicate less trust in remote headers, see https://github.com/ethereum/go-ethereum/issues/17637
    
    * signer: prevent possibility swap KV-entries in aes_gcm storage, fixes #17635
    
    * signer: remove ecrecover from external API
    
    * signer,clef: default reject instead of warn + valideate new passwords. fixes #17632 and #17631
    
    * signer: check calldata length even if no ABI signature is present
    
    * signer: fix failing testcase
    
    * clef: remove account import from external api
    
    * signer: allow space in passwords, improve error messsage
    
    * signer/storage: fix typos
    d3441ebb
    cmd/clef, signer: security fixes (#17554)
    Martin Holst Swende authored
    * signer: remove local path disclosure from extapi
    
    * signer: show more data in cli ui
    
    * rpc: make http server forward UA and Origin via Context
    
    * signer, clef/core: ui changes + display UA and Origin
    
    * signer: cliui - indicate less trust in remote headers, see https://github.com/ethereum/go-ethereum/issues/17637
    
    * signer: prevent possibility swap KV-entries in aes_gcm storage, fixes #17635
    
    * signer: remove ecrecover from external API
    
    * signer,clef: default reject instead of warn + valideate new passwords. fixes #17632 and #17631
    
    * signer: check calldata length even if no ABI signature is present
    
    * signer: fix failing testcase
    
    * clef: remove account import from external api
    
    * signer: allow space in passwords, improve error messsage
    
    * signer/storage: fix typos
Loading