fix: handle non-url origins - #140
Merged
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the confirmation UI origin formatting helpers so non-URL origins (e.g., MetaMask internal origin and WalletConnect) display friendly labels, while invalid/non-HTTP(S) values format to an empty string to allow the UI to hide the origin row.
Changes:
- Added a known-origins label map and updated
formatOriginto return friendly labels, HTTP(S) hostnames, or''for other inputs. - Added an HTTP(S)-protocol guard (
isHttpOrHttpsUrl) to prevent displaying hostnames for non-HTTP(S) URL schemes. - Expanded unit tests for
formatOriginto cover known origins, URL origins, non-HTTP URLs, invalid strings, and channel-id-like values.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
packages/snap/src/ui/confirmation/utils.ts |
Implements new origin formatting rules (known labels, HTTP(S) hostname extraction, empty string for unsupported/invalid origins). |
packages/snap/src/ui/confirmation/utils.test.ts |
Adds coverage for the updated formatOrigin behavior across expected origin input variants. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
stanleyyconsensys
previously approved these changes
Jun 27, 2026
stanleyyconsensys
left a comment
Collaborator
There was a problem hiding this comment.
LGTM, 2 min comments, not a blocker
| ); | ||
| }); | ||
|
|
||
| describe('formatOrigin', () => { |
Collaborator
There was a problem hiding this comment.
nit:
lets use it.each , to min the duplicate
wdyt?
e.g
it.each([
{
testcase: '"Unknown" for an undefined origin',
input: undefined,
expected: 'Unknown'
},
...
])('returns %s', ({
input,
expected
}) => {
expect(formatOrigin(input)).toStrictEqual(expected);
})
| }); | ||
|
|
||
| it('returns "Unknown" for an empty origin', () => { | ||
| expect(formatOrigin('')).toBe('Unknown'); |
Collaborator
There was a problem hiding this comment.
nit:
Suggested change
| expect(formatOrigin('')).toBe('Unknown'); | |
| expect(formatOrigin('')).toStrictEqual('Unknown'); |
0xEdouardEth
force-pushed
the
fix/validate-origin-url
branch
from
June 30, 2026 09:09
ad16000 to
54a6558
Compare
stanleyyconsensys
approved these changes
Jun 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Explanation
This PR updates the Stellar Snap confirmation origin helpers to handle non-URL origins such as the stable
wallet-connectorigin used by MetaMask Mobile WalletConnect multichain requests.Valid HTTP(S) URL origins continue to be displayed as hostnames. Known non-URL origins are displayed with friendly labels, currently
MetaMaskandWalletConnect. Unknown invalid origins, including WalletConnect channel IDs, now format to an empty string so confirmation UI can avoid showing meaningless identifiers.Tests were added for known origins, URL origins, non-http URLs, WalletConnect channel IDs, invalid origin strings, and the existing confirmation utility behavior.
References
Checklist
Validation
Result: 1 test suite passed, 23 tests passed.
Result: passed.