dom tame poc

[weizman]

works nicely, still needs to tame addEventListener (EventMessage.prototype window leaking props).
test by:

• yarn dist
• lookup document.createElement("div"); under the entire dist/chrome folder
• pick the one within common-1.js (should have the string "50px" right after it)
• paste the following code right after it
• visit the extension with your devtools open

;(function test1(){ debugger;
    try {
        document.createElement('a').ownerDocument.location
    } catch (e) {
        e.message === 'NOT ALLOWED(document): location';
    }
    try {
        document.createElement('a').ownerDocument.open
    } catch (e) {
        e.message === 'NOT ALLOWED(document): open';
    }
    try {
        document.createElement('a').ownerDocument.defaultView.alert
    } catch (e) {
        e.message === 'NOT ALLOWED(window): alert';
    }
    try {
        document.createElement('a').ownerDocument.body.getRootNode() === document.createElement('a').ownerDocument
    } catch {}
    try {
        document.createElement('a').ownerDocument.body.parentNode.parentNode === document.createElement('a').ownerDocument
    } catch {}
}());

[weizman]

this works! fc178c0

[metamaskbot]

Builds ready [929f3d9]

• builds: chrome, firefox
• builds (flask): chrome, firefox
• builds (MMI): chrome
• builds (test): chrome, firefox
• builds (test-flask): chrome, firefox
• build viz: Build System
• mv3: Bundle Size Stats
• mv2: E2e Actions Stats
• storybook: Storybook
• typescript migration: Dashboard
• all artifacts
• bundle viz:

  • background: 0, 1, 2, 3, 4, 5, 6, 7
  • common: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
  • ui: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13
  • content-script: 0
  • offscreen: 0

Page Load Metrics (1661 ± 41 ms)

Platform	Page	Metric	Min (ms)	Max (ms)	Average (ms)	StandardDeviation (ms)	MarginOfError (ms)
Chrome	Home	firstPaint	1502	1913	1666	87	42
		domContentLoaded	1489	1831	1634	78	37
		load	1494	1917	1661	85	41
		domInteractive	25	166	39	32	15
		backgroundConnect	6	85	27	21	10
		firstReactRender	16	105	47	33	16
		getState	4	99	25	27	13
		initialActions	0	1	0	0	0
		loadScripts	1092	1404	1227	72	35
		setupStore	5	89	21	28	13
		uiStartup	1722	2766	2029	265	127

Bundle size diffs

• background: 0 Bytes (0.00%)
• ui: 0 Bytes (0.00%)
• common: 0 Bytes (0.00%)

[weizman]

this causes one error specifically with LavaDome, which would be fixed once LavaMoat/LavaDome#60 is merged

[weizman]

proper lavamoat api attempt @ LavaMoat/LavaMoat#1540

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity in the last 90 days. It will be closed in 7 days. Thank you for your contributions.

[github-actions]

This PR was closed because there has been no follow up activity in 7 days. Thank you for your contributions.