From d463627b54813f1e8ea78ec954661689b9443671 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 16 May 2022 12:31:53 -0230 Subject: [PATCH] 1.1.0 (#10) * v1.1.0 * Update v1.1.0 changelog Co-authored-by: github-actions Co-authored-by: Mark Stacey --- CHANGELOG.md | 16 +++++++++++++++- package.json | 2 +- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 035c8ba..7fc2264 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,10 +6,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [1.1.0] +### Added +- Add service worker for offline caching ([#9](https://github.com/MetaMask/phishing-warning/pull/9)) +- Add favicons ([#8](https://github.com/MetaMask/phishing-warning/pull/8)) +- Add actions to publish to gh-pages ([#3](https://github.com/MetaMask/phishing-warning/pull/3)) +- Add dummy "main" script ([#6](https://github.com/MetaMask/phishing-warning/pull/6)) + - This allows locating the package install directory using `require.resolve`, which is better for compatibility between package managers. + - The main script throws an error, helping to prevent accidental misuse. +- Skip initialization if the page is being loaded solely to install the service worker ([#11](https://github.com/MetaMask/phishing-warning/pull/11)) + - If the hash `#extensionStartup` is set, skip setup and assume the page is being loaded just for service worker installation. We use this technique to ensure the service worker is installed during the MetaMask extension startup process. +- Add anti-clickjacking measures ([#12](https://github.com/MetaMask/phishing-warning/pull/12)) + - A script was added to the HTML file to detect when the frame is being embedded. If it detects that it is embedded, a separate design is used that prompts the user to open the warning page in a new tab to proceed. This ensures the blocked page cannot be added to the safelist via a clickjacking attack. + ## [1.0.0] ### Changed - Initial implementation of the phishing warning page - This should behave identically to the phishing warning page built into the MetaMask extension. -[Unreleased]: https://github.com/MetaMask/phishing-warning/compare/v1.0.0...HEAD +[Unreleased]: https://github.com/MetaMask/phishing-warning/compare/v1.1.0...HEAD +[1.1.0]: https://github.com/MetaMask/phishing-warning/compare/v1.0.0...v1.1.0 [1.0.0]: https://github.com/MetaMask/phishing-warning/releases/tag/v1.0.0 diff --git a/package.json b/package.json index 4419410..b4711f0 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@metamask/phishing-warning", - "version": "1.0.0", + "version": "1.1.0", "description": "A page to warn users about a suspected phishing site.", "repository": { "type": "git",