• Martin Holst Swende's avatar
    cmd/clef, signer: security fixes (#17554) · d3441ebb
    Martin Holst Swende authored
    * signer: remove local path disclosure from extapi
    
    * signer: show more data in cli ui
    
    * rpc: make http server forward UA and Origin via Context
    
    * signer, clef/core: ui changes + display UA and Origin
    
    * signer: cliui - indicate less trust in remote headers, see https://github.com/ethereum/go-ethereum/issues/17637
    
    * signer: prevent possibility swap KV-entries in aes_gcm storage, fixes #17635
    
    * signer: remove ecrecover from external API
    
    * signer,clef: default reject instead of warn + valideate new passwords. fixes #17632 and #17631
    
    * signer: check calldata length even if no ABI signature is present
    
    * signer: fix failing testcase
    
    * clef: remove account import from external api
    
    * signer: allow space in passwords, improve error messsage
    
    * signer/storage: fix typos
    d3441ebb
Name
Last commit
Last update
.github Loading commit data...
accounts Loading commit data...
build Loading commit data...
cmd Loading commit data...
common Loading commit data...
consensus Loading commit data...
console Loading commit data...
containers/docker Loading commit data...
contracts Loading commit data...
core Loading commit data...
crypto Loading commit data...
dashboard Loading commit data...
eth Loading commit data...
ethclient Loading commit data...
ethdb Loading commit data...
ethstats Loading commit data...
event Loading commit data...
internal Loading commit data...
les Loading commit data...
light Loading commit data...
log Loading commit data...
metrics Loading commit data...
miner Loading commit data...
mobile Loading commit data...
node Loading commit data...
p2p Loading commit data...
params Loading commit data...
rlp Loading commit data...
rpc Loading commit data...
signer Loading commit data...
swarm Loading commit data...
tests Loading commit data...
trie Loading commit data...
vendor Loading commit data...
whisper Loading commit data...
.dockerignore Loading commit data...
.gitattributes Loading commit data...
.gitignore Loading commit data...
.gitmodules Loading commit data...
.mailmap Loading commit data...
.travis.yml Loading commit data...
AUTHORS Loading commit data...
COPYING Loading commit data...
COPYING.LESSER Loading commit data...
Dockerfile Loading commit data...
Dockerfile.alltools Loading commit data...
Makefile Loading commit data...
README.md Loading commit data...
appveyor.yml Loading commit data...
circle.yml Loading commit data...
interfaces.go Loading commit data...