Skip to content

Conversation

@davidmurdoch
Copy link
Contributor

@davidmurdoch davidmurdoch commented Mar 27, 2025

We don't use this code path, but just having this url appear in our extension bundle makes it looks like we could load code from an external source, something which is not permitted by extension web stores.

To test: download the build (or build it yourself), extract it, search the source the code for browser.sentry-cdn.com. It should not exist.

@metamaskbot metamaskbot added the team-extension-platform Extension Platform team label Mar 27, 2025
@davidmurdoch davidmurdoch force-pushed the patch-sentry-cdn-url-away branch from 074eae9 to b6b88e3 Compare March 27, 2025 16:18
@github-actions
Copy link
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@metamaskbot
Copy link
Collaborator

Builds ready [229596f]
UI Startup Metrics (1233 ± 65 ms)
PlatformBuildTypePageMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P 75 (ms)P 95 (ms)
ChromeBrowserifyHomeuiStartup1233112314376512841340
load10859801214611152990
domContentLoaded10799741210601144982
domInteractive17137391730
firstPaint7731271236421225307
backgroundConnect105525910
firstReactRender20145262134
getState11431668
initialActions002000
loadScripts82469593961872935
setupStore8521278
WebpackHomeuiStartup934817114958958981
load80160798363841880
domContentLoaded79660197762835872
domInteractive15123561332
firstPaint46155913324794851
backgroundConnect15113441525
firstReactRender13122411315
getState6314278
initialActions001001
loadScripts79459196762832862
setupStore7510189
FirefoxBrowserifyHomeuiStartup13571169186514113931725
load12191023167813412581577
domContentLoaded12191023167713412581576
domInteractive10339222318898
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect23165572436
firstReactRender23196362428
getState6325279
initialActions001001
loadScripts11971005165013112361542
setupStore6334367
WebpackHomeuiStartup10118661604161920975
load8817491460147818878
domContentLoaded8817481459147816878
domInteractive111321802715397
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect21145672533
firstReactRender20173632026
getState114601189
initialActions001001
loadScripts8637331427144803891
setupStore8537489
Bundle size diffs [🚀 Bundle size reduced!]
  • background: 0 Bytes (0%)
  • ui: 0 Bytes (0%)
  • common: -34 Bytes (0%)

@davidmurdoch davidmurdoch force-pushed the patch-sentry-cdn-url-away branch from 229596f to 89d36cc Compare March 27, 2025 18:08
@metamaskbot
Copy link
Collaborator

Builds ready [89d36cc]
UI Startup Metrics (1207 ± 68 ms)
PlatformBuildTypePageMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P 75 (ms)P 95 (ms)
ChromeBrowserifyHomeuiStartup1207107315246812471318
load10689361380661164993
domContentLoaded10629321377661170989
domInteractive16126971528
firstPaint8341641219388235989
backgroundConnect9645499
firstReactRender18153531825
getState10428667
initialActions001001
loadScripts810678112466849902
setupStore7413278
WebpackHomeuiStartup928816108152953984
load79658391263834869
domContentLoaded79057690663828865
domInteractive15114061332
firstPaint50656907330824858
backgroundConnect15103451526
firstReactRender13122421316
getState6314277
initialActions001001
loadScripts78856689364827864
setupStore7510189
FirefoxBrowserifyHomeuiStartup13731195190813914031735
load12301069176113512641564
domContentLoaded12291069176113512631564
domInteractive10040235278597
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect2717145162751
firstReactRender24195882553
getState7343579
initialActions002001
loadScripts12041053174013512381536
setupStore6433368
WebpackHomeuiStartup9878491520165905983
load8647431325146802881
domContentLoaded8647421325146802880
domInteractive111362082616097
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect201397122135
firstReactRender19162821923
getState94651079
initialActions001001
loadScripts8477261305142789862
setupStore8564878
Bundle size diffs [🚀 Bundle size reduced!]
  • background: 0 Bytes (0%)
  • ui: 70 Bytes (0%)
  • common: -1.58 KiB (-0.02%)

@davidmurdoch davidmurdoch marked this pull request as ready for review March 28, 2025 15:32
@metamaskbot
Copy link
Collaborator

Builds ready [74e9220]
UI Startup Metrics (1192 ± 60 ms)
PlatformBuildTypePageMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P 75 (ms)P 95 (ms)
ChromeBrowserifyHomeuiStartup1192107513346012391290
load10399421178531142982
domContentLoaded1033938117353942995
domInteractive16133041628
firstPaint774951177388250976
backgroundConnect107536910
firstReactRender20145682043
getState11431769
initialActions001001
loadScripts82070896353864904
setupStore8527378
WebpackHomeuiStartup952786124276960987
load80959995164841907
domContentLoaded80358694265834901
domInteractive15123661434
firstPaint50858919339827863
backgroundConnect16114881440
firstReactRender14123641325
getState7428378
initialActions001001
loadScripts80157693265833889
setupStore7416289
FirefoxBrowserifyHomeuiStartup13571171177712314091663
load12211059162911812651503
domContentLoaded12211058162911812641503
domInteractive9839196308797
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect24174962737
firstReactRender22194642329
getState7437579
initialActions001001
loadScripts11991042159111712451475
setupStore6412267
WebpackHomeuiStartup9978571650181895962
load8737331418158814958
domContentLoaded8737331417158814958
domInteractive115372062513695
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect2213112132534
firstReactRender19163431925
getState104831489
initialActions001001
loadScripts8567211383154800950
setupStore7531378
Bundle size diffs [🚀 Bundle size reduced!]
  • background: 0 Bytes (0%)
  • ui: 0 Bytes (0%)
  • common: -1.58 KiB (-0.02%)

@davidmurdoch davidmurdoch changed the title fix: remove sentry cdn url from sentry script fix: cp-12.15.0 remove sentry cdn url from sentry script Mar 28, 2025
Copy link
Member

@Gudahtt Gudahtt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Patch looks correct to me! I haven't tested yet though, someone should do that before we merge this.

@davidmurdoch davidmurdoch added this pull request to the merge queue Mar 28, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Mar 28, 2025
@davidmurdoch davidmurdoch added this pull request to the merge queue Mar 28, 2025
Merged via the queue into main with commit b5a236e Mar 28, 2025
154 checks passed
@davidmurdoch davidmurdoch deleted the patch-sentry-cdn-url-away branch March 28, 2025 19:35
@github-actions github-actions bot locked and limited conversation to collaborators Mar 28, 2025
@metamaskbot metamaskbot added the release-12.17.0 Issue or pull request that will be included in release 12.17.0 label Mar 28, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

release-12.17.0 Issue or pull request that will be included in release 12.17.0 team-extension-platform Extension Platform team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants