@0xsequence/provider 1.9.17 → 1.9.18

package/dist/0xsequence-provider.cjs.dev.js

@@ -2,15 +2,53 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
+var abi = require('@0xsequence/abi');
+var core = require('@0xsequence/core');
+var ethers = require('ethers');
 var eventemitter2 = require('eventemitter2');
 var utils = require('@0xsequence/utils');
-var ethers = require('ethers');
 var network = require('@0xsequence/network');
-var core = require('@0xsequence/core');
 var auth = require('@0xsequence/auth');
-var abi = require('@0xsequence/abi');
 var tracker = require('@databeat/tracker');
 
+const PROHIBITED_FUNCTIONS = new Map(['addHook(bytes4,address)', 'clearExtraImageHashes(bytes32[])', 'removeHook(bytes4)', 'setExtraImageHash(bytes32,uint256)', 'updateIPFSRoot(bytes32)', 'updateImageHash(bytes32)', 'updateImageHashAndIPFS(bytes32,bytes32)', 'updateImplementation(address)'].map(signature => [ethers.ethers.utils.keccak256(ethers.ethers.utils.toUtf8Bytes(signature)).slice(0, 10), signature]));
+function validateTransactionRequest(wallet, transaction) {
+  const transactions = core.commons.transaction.fromTransactionish(wallet, transaction);
+  const unwound = core.commons.transaction.unwind(wallet, transactions);
+  unwound.forEach(transaction => validateTransaction(wallet, transaction));
+}
+function validateTransaction(wallet, transaction) {
+  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
+    if (transaction.data) {
+      const data = ethers.ethers.utils.arrayify(transaction.data);
+      if (data.length >= 4 && !isCreateContractCall(data)) {
+        throw new Error('self calls are forbidden');
+      }
+    }
+  }
+  if (transaction.delegateCall) {
+    throw new Error('delegate calls are forbidden');
+  }
+  if (transaction.data) {
+    const data = ethers.ethers.utils.hexlify(transaction.data);
+    const selector = data.slice(0, 10);
+    const signature = PROHIBITED_FUNCTIONS.get(selector);
+    if (signature) {
+      const name = signature.slice(0, signature.indexOf('('));
+      throw new Error(`${name} calls are forbidden`);
+    }
+  }
+}
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
+
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
     for (var i = 1; i < arguments.length; i++) {
@@ -2150,34 +2188,6 @@ function fromExtended(transaction) {
   return [transaction, ...(transaction.auxiliary || [])];
 }
 
-function validateTransactionRequest(wallet, transaction) {
-  const transactions = core.commons.transaction.fromTransactionish(wallet, transaction);
-  const unwound = core.commons.transaction.unwind(wallet, transactions);
-  unwound.forEach(transaction => validateTransaction(wallet, transaction));
-}
-function validateTransaction(wallet, transaction) {
-  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
-    if (transaction.data) {
-      const data = ethers.ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4 && !isCreateContractCall(data)) {
-        throw new Error('self calls are forbidden');
-      }
-    }
-  }
-  if (transaction.delegateCall) {
-    throw new Error('delegate calls are forbidden');
-  }
-}
-function isCreateContractCall(data) {
-  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
-  try {
-    walletInterface.decodeFunctionData('createContract', data);
-    return true;
-  } catch (_unused) {
-    return false;
-  }
-}
-
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
   constructor(_account, prompter, networks) {
@@ -3612,7 +3622,7 @@ const setupAnalytics = (projectAccessKey, server) => {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.9.17",
+	version: "1.9.18",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",
@@ -4280,3 +4290,4 @@ exports.resolveArrayProperties = resolveArrayProperties;
 exports.trimEIP191Prefix = trimEIP191Prefix;
 exports.unregisterWallet = unregisterWallet;
 exports.useBestStore = useBestStore;
+exports.validateTransactionRequest = validateTransactionRequest;

package/dist/0xsequence-provider.cjs.prod.js

@@ -2,15 +2,53 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
+var abi = require('@0xsequence/abi');
+var core = require('@0xsequence/core');
+var ethers = require('ethers');
 var eventemitter2 = require('eventemitter2');
 var utils = require('@0xsequence/utils');
-var ethers = require('ethers');
 var network = require('@0xsequence/network');
-var core = require('@0xsequence/core');
 var auth = require('@0xsequence/auth');
-var abi = require('@0xsequence/abi');
 var tracker = require('@databeat/tracker');
 
+const PROHIBITED_FUNCTIONS = new Map(['addHook(bytes4,address)', 'clearExtraImageHashes(bytes32[])', 'removeHook(bytes4)', 'setExtraImageHash(bytes32,uint256)', 'updateIPFSRoot(bytes32)', 'updateImageHash(bytes32)', 'updateImageHashAndIPFS(bytes32,bytes32)', 'updateImplementation(address)'].map(signature => [ethers.ethers.utils.keccak256(ethers.ethers.utils.toUtf8Bytes(signature)).slice(0, 10), signature]));
+function validateTransactionRequest(wallet, transaction) {
+  const transactions = core.commons.transaction.fromTransactionish(wallet, transaction);
+  const unwound = core.commons.transaction.unwind(wallet, transactions);
+  unwound.forEach(transaction => validateTransaction(wallet, transaction));
+}
+function validateTransaction(wallet, transaction) {
+  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
+    if (transaction.data) {
+      const data = ethers.ethers.utils.arrayify(transaction.data);
+      if (data.length >= 4 && !isCreateContractCall(data)) {
+        throw new Error('self calls are forbidden');
+      }
+    }
+  }
+  if (transaction.delegateCall) {
+    throw new Error('delegate calls are forbidden');
+  }
+  if (transaction.data) {
+    const data = ethers.ethers.utils.hexlify(transaction.data);
+    const selector = data.slice(0, 10);
+    const signature = PROHIBITED_FUNCTIONS.get(selector);
+    if (signature) {
+      const name = signature.slice(0, signature.indexOf('('));
+      throw new Error(`${name} calls are forbidden`);
+    }
+  }
+}
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
+
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
     for (var i = 1; i < arguments.length; i++) {
@@ -2150,34 +2188,6 @@ function fromExtended(transaction) {
   return [transaction, ...(transaction.auxiliary || [])];
 }
 
-function validateTransactionRequest(wallet, transaction) {
-  const transactions = core.commons.transaction.fromTransactionish(wallet, transaction);
-  const unwound = core.commons.transaction.unwind(wallet, transactions);
-  unwound.forEach(transaction => validateTransaction(wallet, transaction));
-}
-function validateTransaction(wallet, transaction) {
-  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
-    if (transaction.data) {
-      const data = ethers.ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4 && !isCreateContractCall(data)) {
-        throw new Error('self calls are forbidden');
-      }
-    }
-  }
-  if (transaction.delegateCall) {
-    throw new Error('delegate calls are forbidden');
-  }
-}
-function isCreateContractCall(data) {
-  const walletInterface = new ethers.ethers.utils.Interface(abi.walletContracts.mainModule.abi);
-  try {
-    walletInterface.decodeFunctionData('createContract', data);
-    return true;
-  } catch (_unused) {
-    return false;
-  }
-}
-
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
   constructor(_account, prompter, networks) {
@@ -3612,7 +3622,7 @@ const setupAnalytics = (projectAccessKey, server) => {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.9.17",
+	version: "1.9.18",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",
@@ -4280,3 +4290,4 @@ exports.resolveArrayProperties = resolveArrayProperties;
 exports.trimEIP191Prefix = trimEIP191Prefix;
 exports.unregisterWallet = unregisterWallet;
 exports.useBestStore = useBestStore;
+exports.validateTransactionRequest = validateTransactionRequest;

package/dist/0xsequence-provider.esm.js

@@ -1,12 +1,50 @@
+import { walletContracts } from '@0xsequence/abi';
+import { commons } from '@0xsequence/core';
+import { ethers, BigNumber } from 'ethers';
 import { EventEmitter2 } from 'eventemitter2';
 import { logger, encodeMessageDigest, encodeTypedDataDigest, sanitizeNumberString, sanitizeHost, sanitizeAlphanumeric, base64EncodeObject, base64DecodeObject } from '@0xsequence/utils';
-import { ethers, BigNumber } from 'ethers';
 import { findSupportedNetwork, ChainId, findNetworkConfig, allNetworks, JsonRpcRouter, loggingProviderMiddleware, exceptionProviderMiddleware, CachedProvider, JsonRpcSender } from '@0xsequence/network';
-import { commons } from '@0xsequence/core';
 import { signAuthorization } from '@0xsequence/auth';
-import { walletContracts } from '@0xsequence/abi';
 import { isBrowser, Databeat } from '@databeat/tracker';
 
+const PROHIBITED_FUNCTIONS = new Map(['addHook(bytes4,address)', 'clearExtraImageHashes(bytes32[])', 'removeHook(bytes4)', 'setExtraImageHash(bytes32,uint256)', 'updateIPFSRoot(bytes32)', 'updateImageHash(bytes32)', 'updateImageHashAndIPFS(bytes32,bytes32)', 'updateImplementation(address)'].map(signature => [ethers.utils.keccak256(ethers.utils.toUtf8Bytes(signature)).slice(0, 10), signature]));
+function validateTransactionRequest(wallet, transaction) {
+  const transactions = commons.transaction.fromTransactionish(wallet, transaction);
+  const unwound = commons.transaction.unwind(wallet, transactions);
+  unwound.forEach(transaction => validateTransaction(wallet, transaction));
+}
+function validateTransaction(wallet, transaction) {
+  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
+    if (transaction.data) {
+      const data = ethers.utils.arrayify(transaction.data);
+      if (data.length >= 4 && !isCreateContractCall(data)) {
+        throw new Error('self calls are forbidden');
+      }
+    }
+  }
+  if (transaction.delegateCall) {
+    throw new Error('delegate calls are forbidden');
+  }
+  if (transaction.data) {
+    const data = ethers.utils.hexlify(transaction.data);
+    const selector = data.slice(0, 10);
+    const signature = PROHIBITED_FUNCTIONS.get(selector);
+    if (signature) {
+      const name = signature.slice(0, signature.indexOf('('));
+      throw new Error(`${name} calls are forbidden`);
+    }
+  }
+}
+function isCreateContractCall(data) {
+  const walletInterface = new ethers.utils.Interface(walletContracts.mainModule.abi);
+  try {
+    walletInterface.decodeFunctionData('createContract', data);
+    return true;
+  } catch (_unused) {
+    return false;
+  }
+}
+
 function _extends() {
   _extends = Object.assign ? Object.assign.bind() : function (target) {
     for (var i = 1; i < arguments.length; i++) {
@@ -2146,34 +2184,6 @@ function fromExtended(transaction) {
   return [transaction, ...(transaction.auxiliary || [])];
 }
 
-function validateTransactionRequest(wallet, transaction) {
-  const transactions = commons.transaction.fromTransactionish(wallet, transaction);
-  const unwound = commons.transaction.unwind(wallet, transactions);
-  unwound.forEach(transaction => validateTransaction(wallet, transaction));
-}
-function validateTransaction(wallet, transaction) {
-  if (transaction.to.toLowerCase() === wallet.toLowerCase()) {
-    if (transaction.data) {
-      const data = ethers.utils.arrayify(transaction.data);
-      if (data.length >= 4 && !isCreateContractCall(data)) {
-        throw new Error('self calls are forbidden');
-      }
-    }
-  }
-  if (transaction.delegateCall) {
-    throw new Error('delegate calls are forbidden');
-  }
-}
-function isCreateContractCall(data) {
-  const walletInterface = new ethers.utils.Interface(walletContracts.mainModule.abi);
-  try {
-    walletInterface.decodeFunctionData('createContract', data);
-    return true;
-  } catch (_unused) {
-    return false;
-  }
-}
-
 const SIGNER_READY_TIMEOUT = 10000;
 class WalletRequestHandler {
   constructor(_account, prompter, networks) {
@@ -3608,7 +3618,7 @@ const setupAnalytics = (projectAccessKey, server) => {
 
 var packageJson = {
 	name: "@0xsequence/provider",
-	version: "1.9.17",
+	version: "1.9.18",
 	description: "provider sub-package for Sequence",
 	repository: "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
 	source: "src/index.ts",
@@ -4226,4 +4236,4 @@ const getWallet = () => {
   return sequenceWalletProvider;
 };
 
-export { BaseInjectedTransport, BaseProviderTransport, BaseWalletTransport, CHANNEL_ID, DefaultChainIdTracker, DefaultProviderConfig, ErrSignedInRequired, EventType, ExtensionMessageHandler, ExtensionMessageProvider, InitState, LocalStorage, MemoryItemStore, MuxMessageProvider, OpenState, PROVIDER_OPEN_TIMEOUT, ProviderError, ProxyMessageChannel, ProxyMessageChannelPort, ProxyMessageHandler, ProxyMessageProvider, SequenceClient, SequenceClientSession, SequenceProvider, SequenceSigner, SingleNetworkSequenceProvider, SingleNetworkSequenceSigner, UnrealMessageHandler, UnrealMessageProvider, WalletRequestHandler, WindowMessageHandler, WindowMessageProvider, WindowSessionParams, getWallet, initWallet, isBrowserExtension, isMuxTransportTemplate, isProviderTransport, isUnityPlugin, isValidMessageSignature, isValidSignature, isValidTypedDataSignature, isWalletUpToDate, messageToBytes, nextMessageIdx, prefixEIP191Message, resolveArrayProperties, trimEIP191Prefix, unregisterWallet, useBestStore };
+export { BaseInjectedTransport, BaseProviderTransport, BaseWalletTransport, CHANNEL_ID, DefaultChainIdTracker, DefaultProviderConfig, ErrSignedInRequired, EventType, ExtensionMessageHandler, ExtensionMessageProvider, InitState, LocalStorage, MemoryItemStore, MuxMessageProvider, OpenState, PROVIDER_OPEN_TIMEOUT, ProviderError, ProxyMessageChannel, ProxyMessageChannelPort, ProxyMessageHandler, ProxyMessageProvider, SequenceClient, SequenceClientSession, SequenceProvider, SequenceSigner, SingleNetworkSequenceProvider, SingleNetworkSequenceSigner, UnrealMessageHandler, UnrealMessageProvider, WalletRequestHandler, WindowMessageHandler, WindowMessageProvider, WindowSessionParams, getWallet, initWallet, isBrowserExtension, isMuxTransportTemplate, isProviderTransport, isUnityPlugin, isValidMessageSignature, isValidSignature, isValidTypedDataSignature, isWalletUpToDate, messageToBytes, nextMessageIdx, prefixEIP191Message, resolveArrayProperties, trimEIP191Prefix, unregisterWallet, useBestStore, validateTransactionRequest };

package/dist/declarations/src/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./transactions.js";
 export * from "./transports/index.js";
 export * from "./types.js";
 export * from "./provider.js";

package/dist/declarations/src/transactions.d.ts

@@ -0,0 +1,2 @@
+import { commons } from '@0xsequence/core';
+export declare function validateTransactionRequest(wallet: string, transaction: commons.transaction.Transactionish): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xsequence/provider",
-  "version": "1.9.17",
+  "version": "1.9.18",
   "description": "provider sub-package for Sequence",
   "repository": "https://github.com/0xsequence/sequence.js/tree/master/packages/provider",
   "source": "src/index.ts",
@@ -12,15 +12,15 @@
     "@databeat/tracker": "^0.9.1",
     "eventemitter2": "^6.4.5",
     "webextension-polyfill": "^0.10.0",
-    "@0xsequence/abi": "1.9.17",
-    "@0xsequence/account": "1.9.17",
-    "@0xsequence/auth": "1.9.17",
-    "@0xsequence/core": "1.9.17",
-    "@0xsequence/migration": "1.9.17",
-    "@0xsequence/network": "1.9.17",
-    "@0xsequence/relayer": "1.9.17",
-    "@0xsequence/utils": "1.9.17",
-    "@0xsequence/wallet": "1.9.17"
+    "@0xsequence/abi": "1.9.18",
+    "@0xsequence/account": "1.9.18",
+    "@0xsequence/auth": "1.9.18",
+    "@0xsequence/core": "1.9.18",
+    "@0xsequence/migration": "1.9.18",
+    "@0xsequence/network": "1.9.18",
+    "@0xsequence/relayer": "1.9.18",
+    "@0xsequence/utils": "1.9.18",
+    "@0xsequence/wallet": "1.9.18"
   },
   "peerDependencies": {
     "ethers": ">=5.5 < 6"

package/src/index.ts

@@ -1,3 +1,4 @@
+export * from './transactions'
 export * from './transports'
 export * from './types'
 export * from './provider'

package/src/transactions.ts

@@ -2,6 +2,19 @@ import { walletContracts } from '@0xsequence/abi'
 import { commons } from '@0xsequence/core'
 import { ethers } from 'ethers'
 
+const PROHIBITED_FUNCTIONS = new Map(
+  [
+    'addHook(bytes4,address)',
+    'clearExtraImageHashes(bytes32[])',
+    'removeHook(bytes4)',
+    'setExtraImageHash(bytes32,uint256)',
+    'updateIPFSRoot(bytes32)',
+    'updateImageHash(bytes32)',
+    'updateImageHashAndIPFS(bytes32,bytes32)',
+    'updateImplementation(address)'
+  ].map(signature => [ethers.utils.keccak256(ethers.utils.toUtf8Bytes(signature)).slice(0, 10), signature])
+)
+
 export function validateTransactionRequest(wallet: string, transaction: commons.transaction.Transactionish) {
   const transactions = commons.transaction.fromTransactionish(wallet, transaction)
   const unwound = commons.transaction.unwind(wallet, transactions)
@@ -21,6 +34,16 @@ function validateTransaction(wallet: string, transaction: commons.transaction.Tr
   if (transaction.delegateCall) {
     throw new Error('delegate calls are forbidden')
   }
+
+  if (transaction.data) {
+    const data = ethers.utils.hexlify(transaction.data)
+    const selector = data.slice(0, 10)
+    const signature = PROHIBITED_FUNCTIONS.get(selector)
+    if (signature) {
+      const name = signature.slice(0, signature.indexOf('('))
+      throw new Error(`${name} calls are forbidden`)
+    }
+  }
 }
 
 function isCreateContractCall(data: ethers.BytesLike): boolean {