4754fb948b
The main-world bridge was pushed into every https page as a text script. Sites that enforce Trusted Types refuse that and report the attempt to their CSP endpoint — Google's sign-in pages among them, which then have every reason to call the browser insecure. No dapp lives on those origins: a static list of the big enforcing sites is skipped outright, any other origin that rejects the bridge once is remembered and skipped from then on, and where Trusted Types exist unenforced a policy keeps the assignment clean.
17 lines
1.1 KiB
JSON
17 lines
1.1 KiB
JSON
{
|
|
"id": "aegis",
|
|
"name": "Aegis Wallet",
|
|
"version": "0.9.9",
|
|
"category": "plugin",
|
|
"description": "Multi-chain wallet (BCH, BTC, TRX, ETH, SOL, SC, DGB) derived from your Theseus vault. Dapps get window.bitcoincash on .x sites; window.tronWeb / window.tronLink / window.ethereum / window.solana on any https page.",
|
|
"author": "Silent Mode",
|
|
"icon": "data:image/svg+xml;utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32' fill='none'%3E%3Cpolygon points='16,2 28,9 28,23 16,30 4,23 4,9' fill='%230a0a0d' stroke='%23D6FF3D' stroke-width='1.6' stroke-linejoin='round'/%3E%3Ccircle cx='16' cy='16' r='4.5' fill='none' stroke='%23D6FF3D' stroke-width='1.4'/%3E%3Ccircle cx='16' cy='16' r='1.6' fill='%23D6FF3D'/%3E%3C/svg%3E",
|
|
"main": "index.js",
|
|
"updateURL": "https://navigate.st/bns/theseus.x/extensions/aegis/updates.json",
|
|
"capabilities": ["sidebar-panel", "vault-derive", "page-inject", "approval-modal", "scan-page"],
|
|
"absorbs": ["bchwallet", "siawallet"],
|
|
"page-inject": {
|
|
"preload": "wallet-inject.js",
|
|
"origins": ["https://*/*"]
|
|
}
|
|
}
|