chore(wip): correct sandbox and add coep and coop (not working yet)

zksecurity · Sep 25, 2024 · 89590a5 · 89590a5
1 parent fe679b2
commit 89590a5
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 14 deletions.
diff --git a/browser-extension/public/manifest.json b/browser-extension/public/manifest.json
@@ -11,10 +11,16 @@
     "service_worker": "background.js"
   },
   "sandbox": {
-    "pages": ["sandbox.html"]
+    "pages": ["proof/sandbox.html"]
   },
   "content_security_policy": {
     "extension_pages": "script-src 'self'; object-src 'self'",
-    "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval'; child-src 'self'"
+    "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval'; worker-src blob: 'self'; child-src blob: 'self'"
+  },
+  "cross_origin_embedder_policy": {
+    "value": "require-corp"
+  },
+  "cross_origin_opener_policy": {
+    "value": "same-origin"
   }
 }
diff --git a/browser-extension/src/proof/sandbox.html b/browser-extension/src/proof/sandbox.html
@@ -1,10 +1,8 @@
 <!DOCTYPE html>
 <html>
   <head>
-    <meta
-      http-equiv="Content-Security-Policy"
-      content="script-src 'self' 'wasm-eval';"
-    />
+    <meta http-equiv="Cross-Origin-Embedder-Policy" content="require-corp" />
+    <meta http-equiv="Cross-Origin-Opener-Policy" content="same-origin" />
     <script type="module" src="sandbox.js"></script>
   </head>
   <body></body>

diff --git a/browser-extension/src/proof/sandbox.js b/browser-extension/src/proof/sandbox.js
@@ -13,16 +13,8 @@ const zkProgram = ZkProgram({
     verifyAge: {
       privateInputs: [Field, PublicKey, Signature],
       async method(minAge, age, issuerPubKey, signature) {
-        console.log('verifyAge method called with:', {
-          minAge,
-          age,
-          issuerPubKey,
-          signature,
-        });
         const validSignature = signature.verify(issuerPubKey, [age]);
-        console.log('Signature verification result:', validSignature);
         validSignature.assertTrue();
-        console.log('Asserting age >= minAge');
         age.assertGreaterThanOrEqual(minAge);
         return issuerPubKey;
       },