Info
v1
v2
v3
v4
v5
v5.1
P-8 v5 · Multi-vector
init…
Setup
5. eth_requestAccounts
0. Provider info
1. wallet_watchAsset injection
WA1. symbol " → title
WA2. address " → title
WA3. image " → title
2. personal_sign XSS probe
PS1. sign HTML probe
PS2. sign JS scheme probe
3. Direct trustwallet.setConfig
SC1. check setConfig exists
SC2. call setConfig with injection
4. iOS WKWebView messageHandlers
WK1. check window.webkit.messageHandlers
WK2. try postMessage to handler
5. Deep-link scheme tests
DL1. javascript: in iframe
DL2. data:text/html in iframe
6. eth_sendTransaction data probe
TX1. tx with HTML in data
Observables
Title
localStorage
window.name
All
Clear ls
Copy log