Luka Jeran

Avoid inline script execution for injecting CSRF token

2

## Description Scripts with type="application/json" or "text/plain" are not executed, so we can use them to inject dynamic CSRF data, without allowing inline-script execution in Content-Security-Policy. This helps towards fixing...

Ignore messages other than from iframe parent

3

Malformed messages from extensions throw errors (though download still works). This filters out messages, except those coming from iframe parent. To reproduce errors: - Install MetaMask extension - Open https://jimmywarting.github.io/StreamSaver.js/examples/fetch.html...

Display transactions of type RoothashExecutorCommit

6

- `StakingAllow` and `RoothashExecutorCommit` will appear quite often, so they should be handled nicely - Handle recognized transaction types with something generic, other than "Unrecognized transaction method" Current display https://wallet.oasisprotocol.org/account/oasis1qq3833fnmkqe94h0ca6w8qa84sq8pu92qsjmfayj...

Loading spinner is malformed in extension layout

3

Probably caused by "Loading account" splitting into two lines, and modal width being narrow 

From https://github.com/oasisprotocol/oasis-wallet-web/pull/236#issue-718384300 * ~remove google exceptions by downloading fonts~ https://github.com/oasisprotocol/oasis-wallet-web/issues/526 * remove 'unsafe-inline' style by precomputing theme hash * add report-uri to gather errors if anything was missed

Otherwise reloading page changes the selection to mainnet

When Firefox supports backdropFilter, https://github.com/oasisprotocol/oasis-wallet-web/pull/283 can be reverted. Related https://github.com/oasisprotocol/oasis-wallet-web/issues/274 Upstream firefox issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1578503

Improve error when ledger is connected but Oasis app not open

7

If user has ledger open on main menu, and tries to open wallet from ledger: `Unknown ledger error : Unknown Status Code: undefined` 

https://github.com/oasisprotocol/oasis-wallet-web/blob/8a1f53d3817e67c9183d4a86941ca66886c5c8bd/src/vendors/explorer/swagger.yml#L170-L176 https://github.com/oasisprotocol/oasis-wallet-web/blob/37f8b32bb163971003b7ad77bc9e6760cdc47952/src/vendors/explorer/apis/AccountsApi.ts#L391-L398 Real response is a single object: https://monitor.oasis.dev/data/validator/oasis1qqekv2ymgzmd8j2s2u7g0hhc7e77e654kvwqtjwm