feat: WIP! EWM-497 #882
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| 3.29.3 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| { | ||
| "blacklist": [ | ||
| "everscan.com", | ||
| "octsubridge.io", | ||
| "octus-bridge.com", | ||
| "protocoloctusbridge.com", | ||
| "octlusbridge.com", | ||
| "bridge-octus.org", | ||
| "internal-meeting.online", | ||
| "pancake-ever.com", | ||
| "gravixguard.github.io", | ||
| "gravixguard.web.app", | ||
| "broxus.net", | ||
| "chainconnect.app" | ||
| ] | ||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,76 @@ | ||
| <!DOCTYPE html> | ||
| <html lang="en"> | ||
| <head> | ||
| <meta charset="UTF-8" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0"/> | ||
| <title>SparX Wallet Phishing Detection</title> | ||
| <style> | ||
| body { | ||
| margin: 0; | ||
| padding: 20px; | ||
| background-color: #f0f0f0; | ||
| font-family: Arial, sans-serif; | ||
| color: #333; | ||
| } | ||
| .container { | ||
| max-width: 800px; | ||
| margin: 0 auto; | ||
| background-color: #fff; | ||
| border-radius: 4px; | ||
| box-shadow: 0 2px 6px rgba(0,0,0,0.1); | ||
| padding: 24px; | ||
| } | ||
| h1 { | ||
| margin-top: 0; | ||
| font-size: 1.8rem; | ||
| } | ||
| p { | ||
| line-height: 1.6; | ||
| margin-bottom: 1em; | ||
| } | ||
| a { | ||
| color: #0066cc; | ||
| text-decoration: none; | ||
| } | ||
| a:hover { | ||
| text-decoration: underline; | ||
| } | ||
| </style> | ||
| </head> | ||
| <body> | ||
| <div class="container"> | ||
| <h1>SparX Wallet Phishing Detection</h1> | ||
| <p> | ||
| This domain is currently on the SparX Wallet domain warning list. This means | ||
| that based on information available to us, SparX Wallet believes this domain | ||
| could currently compromise your security and, as an added safety feature, | ||
| SparX Wallet has restricted access to the site. To override this, please read | ||
| the rest of this warning for instructions on how to continue at your own risk. | ||
| </p> | ||
| <p> | ||
| There are many reasons sites can appear on our warning list, and our warning | ||
| list compiles from other widely used industry lists. Such reasons can include | ||
| known fraud or security risks, such as domains that test positive on the | ||
| SparX Wallet Phishing Detection. Domains on these warning lists may include | ||
| outright malicious websites and legitimate websites that have been compromised | ||
| by a malicious actor. | ||
| </p> | ||
| <p> | ||
| To read more about this site please | ||
| <a href="https://cryptoscamdb.org/search"> | ||
| search for the domain on CryptoScamDB | ||
| </a>. | ||
| </p> | ||
| <p> | ||
| Note that this warning list is compiled on a voluntary basis. This list may be | ||
| inaccurate or incomplete. Just because a domain does not appear on this list is | ||
| not an implicit guarantee of that domain's safety. As always, your transactions | ||
| are your own responsibility. If you wish to interact with any domain on our | ||
| warning list, you can do so by | ||
| <a href="{PHISHING_ORIGINAL_SITE}"> | ||
| continuing at your own risk | ||
| </a>. | ||
| </p> | ||
| </div> | ||
| </body> | ||
| </html> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| import 'dart:convert'; | ||
|
|
||
| import 'package:app/app/service/resources_service.dart'; | ||
| import 'package:app/utils/json/json.dart'; | ||
| import 'package:flutter/foundation.dart'; | ||
| import 'package:flutter/services.dart'; | ||
| import 'package:logging/logging.dart'; | ||
| import 'package:rxdart/rxdart.dart'; | ||
|
|
||
| class BrowserAntiPhishingManager { | ||
| BrowserAntiPhishingManager(this._resourcesService); | ||
|
|
||
| final _blackListSubj = BehaviorSubject<List<String>>.seeded([]); | ||
|
There was a problem hiding this comment. А может будем использовать Set? Тогда проверка на |
||
|
|
||
| List<String> get blackList => _blackListSubj.value; | ||
|
|
||
| final ResourcesService _resourcesService; | ||
|
|
||
| final _log = Logger('BrowserAntiPhishingManager'); | ||
|
|
||
| Future<void> init() { | ||
| return loadLinksJson(); | ||
| } | ||
|
|
||
| void dispose() { | ||
| _blackListSubj.close(); | ||
| } | ||
|
|
||
| Future<void> loadLinksJson() async { | ||
| try { | ||
| final json = await _resourcesService.loadString( | ||
| 'assets/configs/anti_phishing.json', | ||
| ); | ||
|
|
||
| final map = await compute<String, Map<String, dynamic>>(_parse, json); | ||
|
|
||
| _blackListSubj.add(castJsonList(map['blacklist'])); | ||
| } catch (e, s) { | ||
| _log.severe('Load blacklist JSON error', e, s); | ||
| } | ||
| } | ||
|
|
||
| Future<String> getPhishingGuardHtml(String path) async { | ||
| final html = await rootBundle.loadString('assets/html/anti_phishing.html'); | ||
|
There was a problem hiding this comment. А не стоит это закешировать, чтобы в первый раз мы прочитали из файловой системы, а далее html оставался в памяти? |
||
| html.replaceFirst('{PHISHING_ORIGINAL_SITE}', path); | ||
| return html; | ||
| } | ||
|
|
||
| static Map<String, dynamic> _parse(String json) { | ||
| return jsonDecode(json) as Map<String, dynamic>; | ||
| } | ||
| } | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
А почему не через DI
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Будет. Пока еще нет. Нужно CI доделать.