-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add FirewalledRule #200
Add FirewalledRule #200
Conversation
I added a FirewalledRule which can be extended in order to restrict relaying of meta-transactions to organization workers. The rule that is to be restricted must extend the FirewalledRule and add the modifier `firewalled` to all relevant functions. For testing I created two test contract files. One that uses the modifier, and one that calls the one that uses the modifier. Required in order to simulate rules calling on each other and checking for the relayer. Added a step to manually install npx inside docker until the docker image is fixed. The problem is reported and confirmed at trailofbits/eth-security-toolbox#8 Fixes OpenST#199
Crytic fixed the docker image, I should test and remove the extra line before merging! |
When they fixed the previously reported bug, it seems they broke something else. I made a new report: trailofbits/eth-security-toolbox#9 Waiting for an update, as this cannot be fixed with a workaround. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me. Once Travis fixed we could merge it.
Travis CI cannot cache docker images (https://docs.travis-ci.com/user/caching/#things-not-to-cache):
|
I cannot get the security toolbox to work.
@pgev can you please have a look? I removed slither from |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approving. I've also subscribed to the ticket you've created (Slither fails to execute in latest docker tag). Once it's fixed we should create follow ticket to bring slither back.
I added a FirewalledRule which can be extended in order to restrict
relaying of meta-transactions to organization workers.
The rule that is to be restricted must extend the FirewalledRule and add
the modifier
firewalled
to all relevant functions.For testing I created two test contract files. One that uses the
modifier, and one that calls the one that uses the modifier. Required in
order to simulate rules calling on each other and checking for the
relayer.
Added a step to manually install npx inside docker until the docker
image is fixed. The problem is reported and confirmed at
trailofbits/eth-security-toolbox#8
Fixes #199