Add AnchorStateRegistry Implementation to OPSM

[maurelian]

TL;DR

Added support for starting anchor roots in the OPStackManager deployment process.

What changed?

• Updated DeployOPChainInput to include startingAnchorRoots field
• Modified OPStackManager to accept and use startingAnchorRoots in the deployment process
• Updated DeployOPChain script to pass startingAnchorRoots to the OPStackManager
• Added initialization for AnchorStateRegistry in the deployment process
• Updated relevant tests to include startingAnchorRoots in their setup and assertions

[maurelian]

• Add AnchorStateRegistry Implementation to OPSM #11955 👈
• feat: Add ASR proxy to OPStackManager #11952 : 1 other dependent PR (#11953 )
• develop

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @maurelian and the rest of your teammates on Graphite

[semgrep-app]

Semgrep found 1 no-direct-write-to-responsewriter finding:

• op-challenger/game/fault/trace/prestates/multi_test.go
  • L42 - Triage

Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'.

_{Ignore this finding from no-direct-write-to-responsewriter.}

Semgrep found 1 no-direct-write-to-responsewriter-taint finding:

• op-challenger/game/fault/trace/prestates/multi_test.go
  • L42 - Triage

Untrusted input could be used to tamper with a web page rendering, which can lead to a Cross-site scripting (XSS) vulnerability. XSS vulnerabilities occur when untrusted input executes malicious JavaScript code, leading to issues such as account compromise and sensitive information leakage. To prevent this vulnerability, validate the user input, perform contextual output encoding or sanitize the input. For more information, see: Go XSS prevention.

View Dataflow Graph

flowchart LR
    classDef invis fill:white, stroke: none
    classDef default fill:#e7f5ff, color:#1c7fd6, stroke: none

    subgraph File0["<b>op-challenger/game/fault/trace/prestates/multi_test.go</b>"]
        direction LR
        %% Source

        subgraph Source
            direction LR

            v0["<a href=https://github.com/ethereum-optimism/optimism/blob/98c5c10c332b7776bde230d992e8fea449a6dcb1/op-challenger/game/fault/trace/prestates/multi_test.go#L42 target=_blank style='text-decoration:none; color:#1c7fd6'>[Line: 42] r.URL</a>"]
        end
        %% Intermediate

        %% Sink

        subgraph Sink
            direction LR

            v1["<a href=https://github.com/ethereum-optimism/optimism/blob/98c5c10c332b7776bde230d992e8fea449a6dcb1/op-challenger/game/fault/trace/prestates/multi_test.go#L42 target=_blank style='text-decoration:none; color:#1c7fd6'>[Line: 42] w.Write([]byte(r.URL.Path))</a>"]
        end
    end
    %% Class Assignment
    Source:::invis
    Sink:::invis

    File0:::invis

    %% Connections

    Source --> Sink

Loading

_{Ignore this finding from no-direct-write-to-responsewriter-taint.}

[semgrep-app]

Semgrep found 13 sol-style-notice-over-dev-natspec findings:

• packages/contracts-bedrock/src/dispute/interfaces/IInitializable.sol
  • L8 - Triage
• packages/contracts-bedrock/src/dispute/interfaces/IFaultDisputeGame.sol
  • L51 - Triage
  • L73 - Triage
• packages/contracts-bedrock/src/dispute/interfaces/IDisputeGameFactory.sol
  • L42 - Triage
  • L97 - Triage
  • L103 - Triage
  • L109 - Triage
• packages/contracts-bedrock/src/dispute/interfaces/IDisputeGame.sol
  • L28 - Triage
  • L34 - Triage
  • L39 - Triage
  • L44 - Triage
  • L49 - Triage
  • L57 - Triage

Prefer @notice over @dev in natspec comments

_{Ignore this finding from sol-style-notice-over-dev-natspec.}