MoeraOrg / MoeraOrg/moera-issues
Built a client into the extension
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 20
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Add possibility to built a client into the extension. This makes loading of a specific client faster and protects from malicious clients.
The second goal may be achieved also by adding a hash (SHA-256) of the client to the extension and verify it after downloading the client. But the verification may take time and is not so easy to implement in JS.
Also, the extension containing a blob with the client's code may have difficulties to pass validation for Firefox/Chrome store.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue proposes either embedding a client in the extension or verifying a downloaded client with a SHA-256 hash. Start by resolving which approach is wanted and reviewing the Firefox and Chrome store validation constraints mentioned in the issue. Done means the chosen approach loads the intended client faster and addresses the malicious-client concern without preventing store validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100