Skip to content
This repository has been archived by the owner on Nov 6, 2020. It is now read-only.

Support web hosted dapps #3845

Closed
gavofyork opened this issue Dec 14, 2016 · 4 comments
Closed

Support web hosted dapps #3845

gavofyork opened this issue Dec 14, 2016 · 4 comments
Assignees
Labels
F8-enhancement 🎊 An additional feature request. M6-rpcapi 📣 RPC API. P2-asap 🌊 No need to stop dead in your tracks, however issue should be addressed as soon as possible.
Milestone

Comments

@gavofyork
Copy link
Contributor

This is meant to be an MVP effort. Doesn't need to be perfect at this point.

UI: A text box at the top of the page allowing users to type a URL (e.g. https://mkr.market/) which would then lead to something like (http://127.0.0.1:8180)/proxy/https://mkr.market/.

Core: Parity would interpret the content /proxy/https://mkr.market/ as meaning "grab content from https://mkr.market/ and serve as a dapp in an iframe".

End result users can easily get to web-server-hosted dapps in Parity.

@gavofyork gavofyork added F8-enhancement 🎊 An additional feature request. M6-rpcapi 📣 RPC API. M7-ui P2-asap 🌊 No need to stop dead in your tracks, however issue should be addressed as soon as possible. labels Dec 14, 2016
@gavofyork gavofyork added this to the 1.5 Tenuity milestone Dec 14, 2016
@tomusdrw
Copy link
Collaborator

tomusdrw commented Dec 14, 2016

IMHO if it's a MVP it's better to integrate it as a builtin dapp (called "Web2.0 Browser") or something like this, it won't pollute current UI that much.

Also we need to be careful with XHR calls cause this allows the dapp to fetch arbitrary data overcoming SOP (example: POST http://localhost:8080/proxy/http://localhost:8545/) (allowing only GET requests is solving the problem only partially (you can still query REST APIs from arbitrary domains))

@gavofyork
Copy link
Contributor Author

sure but then it'll need to have higher permissions than normal due since it'll need to access unsafe APIs. that ok?

@tomusdrw
Copy link
Collaborator

Yup. Will figure out some scheme.

@gavofyork
Copy link
Contributor Author

that would be useful to have anyway so i can get my console dapp to use all the APIs.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
F8-enhancement 🎊 An additional feature request. M6-rpcapi 📣 RPC API. P2-asap 🌊 No need to stop dead in your tracks, however issue should be addressed as soon as possible.
Projects
None yet
Development

No branches or pull requests

2 participants