-
-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: removes addSubjectMetadata and improves Snaps Execution Environment Webview origin restriction. #8751
Conversation
CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes. |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #8751 +/- ##
==========================================
+ Coverage 41.38% 41.42% +0.03%
==========================================
Files 1266 1270 +4
Lines 30768 30819 +51
Branches 3028 3041 +13
==========================================
+ Hits 12733 12766 +33
- Misses 17275 17290 +15
- Partials 760 763 +3 ☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me.
|
Description
This PR address removal of subjectMetadata in favor of SnapController triggering addSubjectMetadata itself now, and adding a more restrictive originWhiteList on Snaps Execution Environment Webview.
Related issues
Fixes: Comments on the closed PR 8700
Manual testing steps
Screenshots/Recordings
After
Screen.Recording.2024-02-27.at.15.10.34.mov
Pre-merge author checklist
Pre-merge reviewer checklist