mirror of
https://github.com/kremalicious/metamask-extension.git
synced 2024-12-23 09:52:26 +01:00
Add levenshtein logic to blacklister.
This commit is contained in:
parent
6a9d40c558
commit
66f6d5a4e0
@ -1,13 +1,37 @@
|
||||
const blacklistedDomains = require('etheraddresslookup/blacklists/domains.json')
|
||||
const levenshtein = require('fast-levenshtein')
|
||||
const blacklistedMetaMaskDomains = ['metamask.com']
|
||||
const blacklistedDomains = require('etheraddresslookup/blacklists/domains.json').concat(blacklistedMetaMaskDomains)
|
||||
const whitelistedMetaMaskDomains = ['metamask.io', 'www.metamask.io']
|
||||
const whitelistedDomains = require('etheraddresslookup/whitelists/domains.json').concat(whitelistedMetaMaskDomains)
|
||||
const LEVENSHTEIN_TOLERANCE = 4
|
||||
const LEVENSHTEIN_CHECKS = ['myetherwallet', 'myetheroll', 'ledgerwallet', 'metamask']
|
||||
|
||||
function detectBlacklistedDomain() {
|
||||
var strCurrentTab = window.location.hostname
|
||||
if (blacklistedDomains && blacklistedDomains.includes(strCurrentTab)) {
|
||||
window.location.href = 'https://metamask.io/phishing.html'
|
||||
}
|
||||
function isPhish(hostname) {
|
||||
var strCurrentTab = hostname
|
||||
|
||||
// check if the domain is part of the whitelist.
|
||||
if (whitelistedDomains && whitelistedDomains.includes(strCurrentTab)) { return false }
|
||||
|
||||
// check if the domain is part of the blacklist.
|
||||
var isBlacklisted = blacklistedDomains && blacklistedDomains.includes(strCurrentTab)
|
||||
|
||||
// check for similar values.
|
||||
var levenshteinMatched = false
|
||||
var levenshteinForm = strCurrentTab.replace(/\./g, '')
|
||||
LEVENSHTEIN_CHECKS.forEach((element) => {
|
||||
if (levenshtein.get(element, levenshteinForm) < LEVENSHTEIN_TOLERANCE) {
|
||||
levenshteinMatched = true
|
||||
}
|
||||
})
|
||||
|
||||
return isBlacklisted || levenshteinMatched
|
||||
}
|
||||
|
||||
window.addEventListener('load', function() {
|
||||
detectBlacklistedDomain()
|
||||
window.addEventListener('load', function () {
|
||||
var hostnameToCheck = window.location.hostname
|
||||
if (isPhish(hostnameToCheck)) {
|
||||
window.location.href = 'https://metamask.io/phishing.html'
|
||||
}
|
||||
})
|
||||
|
||||
module.exports = isPhish
|
||||
|
@ -80,6 +80,7 @@
|
||||
"express": "^4.14.0",
|
||||
"extension-link-enabler": "^1.0.0",
|
||||
"extensionizer": "^1.0.0",
|
||||
"fast-levenshtein": "^2.0.6",
|
||||
"gulp-eslint": "^2.0.0",
|
||||
"hat": "0.0.3",
|
||||
"idb-global": "^1.0.0",
|
||||
|
Loading…
Reference in New Issue
Block a user