1
0
mirror of https://github.com/bitwarden/browser synced 2026-02-10 13:40:06 +00:00

Decouple the phishing detection content script logic from the rest of the app.

This commit is contained in:
Jimmy Vo
2025-03-14 15:13:26 -04:00
parent 7052d5d408
commit 275fc1bc7e
2 changed files with 72 additions and 9 deletions

View File

@@ -0,0 +1,66 @@
import { Utils } from "@bitwarden/common/platform/misc/utils";
export class PhishingDetectionBrowserService {
private static knownPhishingDomains = new Set();
static checkUrl(url: string): boolean {
const domain = Utils.getDomain(url);
return PhishingDetectionBrowserService.knownPhishingDomains.has(domain);
}
static notifyUser(url: string) {
const phishingDivId = "phishing-notification-bar";
const message = `${url} is a known phishing site`;
const wrapper = document.createElement("div");
wrapper.id = phishingDivId;
wrapper.classList.add("inner-wrapper");
wrapper.style.position = "fixed";
wrapper.style.top = "20px";
wrapper.style.right = "20px";
wrapper.style.zIndex = "10000";
wrapper.style.backgroundColor = "#fff";
wrapper.style.padding = "15px";
wrapper.style.border = "1px solid #ccc";
wrapper.style.borderRadius = "5px";
wrapper.style.boxShadow = "0 2px 10px rgba(0,0,0,0.2)";
const messageElement = document.createElement("div");
messageElement.id = "change-text";
messageElement.classList.add("notification-body");
messageElement.textContent = message;
const exitButton = document.createElement("button");
exitButton.type = "button";
exitButton.id = "change-exit";
exitButton.classList.add("primary");
exitButton.textContent = "Exit the page";
wrapper.appendChild(messageElement);
wrapper.appendChild(exitButton);
document.body.appendChild(wrapper);
setTimeout(() => {
if (document.body.contains(wrapper)) {
document.body.removeChild(wrapper);
}
}, 10000);
}
static getActiveUrl() {
return window?.location?.href;
}
// @TODO: This can be remove once we implement the real code.
static loadMockedData() {
PhishingDetectionBrowserService.knownPhishingDomains.add("google.com");
PhishingDetectionBrowserService.knownPhishingDomains.add("atlassian.net");
PhishingDetectionBrowserService.knownPhishingDomains.add("example.com");
PhishingDetectionBrowserService.knownPhishingDomains.add("w3schools.com");
}
}
// Initializing the data for local development
PhishingDetectionBrowserService.loadMockedData();

View File

@@ -1,7 +1,5 @@
/* eslint-disable @typescript-eslint/no-unused-vars */
/* eslint-disable no-console */
// eslint-disable-next-line no-restricted-imports
import { PhishingDetectionService } from "src/platform/services/phishing-detection.service";
import { PhishingDetectionBrowserService } from "./content/phishing-detection-browser.service";
if (document.readyState === "loading") {
document.addEventListener("DOMContentLoaded", loadPhishingDetectionContent);
@@ -10,12 +8,11 @@ if (document.readyState === "loading") {
}
async function loadPhishingDetectionContent() {
// Found an issue with the internal PhishingDetectionService not being able to initialize properly.
// const activeUrl = await PhishingDetectionService.getActiveUrl();
// const isPhishingDomain = PhishingDetectionService.checkUrl(activeUrl);
// if (isPhishingDomain) {
// PhishingDetectionService.notifyUser(activeUrl);
// }
const activeUrl = PhishingDetectionBrowserService.getActiveUrl();
const isPhishingDomain = PhishingDetectionBrowserService.checkUrl(activeUrl);
if (isPhishingDomain) {
PhishingDetectionBrowserService.notifyUser(activeUrl);
}
}
console.log("Phishing Detection Service loaded.");