issues
search
LavaMoat
/
LavaDome
Secure DOM trees isolation and encapsulation leveraging ShadowDOM
https://lavamoat.github.io/LavaDome/packages/core/demo/
MIT License
14
stars
3
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Update README Security section
#47
weizman
closed
1 day ago
0
Support copy to clipboard
#46
weizman
opened
1 day ago
0
Refuse to load LavaDome within non-top documents
#45
weizman
closed
11 hours ago
1
chore: add package-manager metadata and lockfile
#44
legobeat
opened
1 month ago
1
feat(react): support react v17, v18
#43
legobeat
opened
1 month ago
3
Refuse to migrate a LavaDome instance from top into non-top documents
#42
weizman
opened
1 month ago
0
Defend from extension content scripts
#41
NDevTK
closed
2 months ago
5
LavaDome bypass via font ligatures
#40
masatokinugawa
closed
11 hours ago
13
LavaDome bypass via overridden built-in methods
#39
masatokinugawa
closed
2 months ago
1
Address bypass by navigation to text-fragments links
#38
weizman
opened
2 months ago
0
LavaDome is vulnerable to onmouseover
#37
weizman
opened
2 months ago
1
LavaDome bypass via Screen Capture API
#36
masatokinugawa
closed
2 months ago
1
LavaDome bypass via text fragments
#35
masatokinugawa
opened
2 months ago
11
Improve demos
#34
weizman
closed
4 months ago
0
Protect text and token using WeakMaps instead of random uuids
#33
weizman
closed
4 months ago
0
Fix render crash when text updates
#32
weizman
closed
4 months ago
0
Safely remove potential React state leakage
#31
weizman
closed
4 months ago
0
Downgrade to unsafe random generation under testing envs
#30
weizman
closed
4 months ago
0
Replace Envelope mechanizm from object to string based to avoid infinite React rerendering
#29
weizman
closed
4 months ago
0
Remove WDIO due to dependency on recently vulnerable dep
#28
weizman
closed
4 months ago
0
React and React-DOM deps should be dev-deps as well as peer-deps
#27
weizman
closed
4 months ago
0
Address React internals processing leakage
#26
weizman
closed
4 months ago
0
Accurate published files list
#25
weizman
closed
4 months ago
0
Integrate LavaMoat allow-scripts protection
#24
weizman
closed
5 months ago
0
feat: wrap payload in envelope
#23
naugtur
closed
4 months ago
1
comments area
#22
naugtur
closed
5 months ago
0
Support LavaDomeDebug being required in non browser envs
#21
weizman
closed
5 months ago
0
Support distraction text stripping from inner secret for debug/tests
#20
weizman
closed
5 months ago
0
Refactor build
#19
weizman
closed
5 months ago
0
Support open mode LavaDome to allow developers to test
#18
weizman
closed
5 months ago
0
Defend against font-face side channeling attack, and refactor
#17
weizman
closed
5 months ago
0
LavaDome is vulnerable to font-face based leak attack
#16
weizman
closed
5 months ago
1
LavaDome is vulnerable to selection API
#15
weizman
opened
6 months ago
1
README edits
#14
MajorLift
closed
6 months ago
0
LavaDome
#13
weizman
closed
6 months ago
0
build(webpack): Remove libraryTarget: "commonjs" option
#12
weizman
closed
6 months ago
0
Implement custom component and demo app for react framework
#11
MajorLift
closed
6 months ago
0
remove react-refresh
#10
MajorLift
closed
6 months ago
0
Monorepo setting adjustments
#9
MajorLift
closed
6 months ago
0
gal progress wip
#8
weizman
closed
6 months ago
0
Configure monorepo setup
#7
MajorLift
closed
6 months ago
0
Safari support
#6
weizman
closed
1 day ago
1
AI generated logo wanted
#5
weizman
opened
6 months ago
0
Add tests
#4
weizman
opened
6 months ago
0
Make demo great
#3
weizman
closed
6 months ago
1
Audit defensive coding
#2
weizman
closed
6 months ago
2
Support React framework
#1
weizman
closed
6 months ago
1