☂️ React Native Compatibility Tracker #1
Assignees
Labels
Comments
leotm
changed the title
13 tasks
leotm
added a commit
to MetaMask/metamask-mobile
that referenced
this issue
Nov 10, 2023
## **Description** Problem being solved: prototype pollution/poisoning SES lockdown (shim v0.18.8) on iOS JSC, baked early into RN core before RN initialisation for the simplest minimal solution as opposed to previous approach of shim'ing at the beginning of our entry file requiring further complex lib patches with SES lockdown on Android Hermes (introduced earlier in our [RN v0.71.6 upgrade](#6220)) being followed up separately currently bundling successfully, but runtime not yet functional _SES lockdown on Android JSC was also passing smoke tests after some work prior to Hermes_ _so a backup engine worth keeping on ice being followed up separately_ _Previous patches no longer required: [`eth-keyring-controller`](https://github.com/MetaMask/metamask-mobile/pull/3794/files#diff-19aae36749eec9908c74557591fade5cc596e9a40422d88594c0fba456870389), `ethjs-contract` (one not [two](https://github.com/MetaMask/metamask-mobile/pull/3794/files#diff-1970015453fca9583682c37a44695a3d26645329e586bb70ff6f05b74f936802)), [`web3-core-methods`](LavaMoat/docs#8), [`metro-react-native-babel-preset`](LavaMoat/docs#4), Sentry [config](LavaMoat/docs#6) (see previous PR: #3794 _Nb: `@babel/plugin-transform-regenerator` removed from `metro-react-native-babel-preset` since initial investigation_ _Nb: `@babel/plugin-transform-runtime` config opt `regenerator: true` previously caused iOS animated node assertion failures_ _Nb: default `@babel/plugin-transform-runtime` via `metro-react-native-babel-preset` causes additional 4 SES warnings_ <details> <summary>Nb: Current behaviour (not SES)</summary> ``` main, jsc - import wallet via SRP - tap form field: disables cmd+D (app must be closed, no Metro restart) main, v8 - (fresh) import wallet via SRP - if cmd+v paste ok, bot Import btn tappable when filled, but spinner hang (no error/warn), ~20s Metro dc - restart, enter pw, tap Unlock btn, spinner hang, still ~20s Metro dc - tap Reset Wallet, hang - import (continued) - partial responsiveness - tap form field: dev menu disabled (cmd+d, app must be closed) - unresponsive: tap Back, tap Show, cannot tap Import, cmd+v disabled - responsive: cycle/input fields - still ~20s Metro dc ``` </details> <details> <summary>Previous SES warnings when locking down at entry file (not RN InitializeCore)</summary> https://www.diffchecker.com/fjj1iObp ```console # JSC (26) Removing intrinsics.Object.setPrototypeOf.default Removing intrinsics.Object.setPrototypeOf.__esModule Removing intrinsics.Object.assign.default Removing intrinsics.Object.assign.__esModule Removing intrinsics.Reflect.construct.default Removing intrinsics.Reflect.construct.__esModule Removing intrinsics.Reflect.decorate Removing intrinsics.Reflect.metadata Removing intrinsics.Reflect.defineMetadata Removing intrinsics.Reflect.hasMetadata Removing intrinsics.Reflect.hasOwnMetadata Removing intrinsics.Reflect.getMetadata Removing intrinsics.Reflect.getOwnMetadata Removing intrinsics.Reflect.getMetadataKeys Removing intrinsics.Reflect.getOwnMetadataKeys Removing intrinsics.Reflect.deleteMetadata Removing intrinsics.%ArrayPrototype%.toReversed Removing intrinsics.%ArrayPrototype%.toSorted Removing intrinsics.%ArrayPrototype%.toSpliced Removing intrinsics.%ArrayPrototype%.with Removing intrinsics.%ArrayPrototype%.@@unscopables.toReversed Removing intrinsics.%ArrayPrototype%.@@unscopables.toSorted Removing intrinsics.%ArrayPrototype%.@@unscopables.toSpliced Removing intrinsics.%TypedArrayPrototype%.toReversed Removing intrinsics.%TypedArrayPrototype%.toSorted Removing intrinsics.%TypedArrayPrototype%.with ``` ```console # V8 (33) Removing intrinsics.Object.assign.default Removing intrinsics.Object.assign.__esModule Removing intrinsics.Object.setPrototypeOf.default Removing intrinsics.Object.setPrototypeOf.__esModule Removing intrinsics.JSON.rawJSON Removing intrinsics.JSON.isRawJSON Removing intrinsics.Reflect.construct.default Removing intrinsics.Reflect.construct.__esModule Removing intrinsics.Reflect.decorate Removing intrinsics.Reflect.metadata Removing intrinsics.Reflect.defineMetadata Removing intrinsics.Reflect.hasMetadata Removing intrinsics.Reflect.hasOwnMetadata Removing intrinsics.Reflect.getMetadata Removing intrinsics.Reflect.getOwnMetadata Removing intrinsics.Reflect.getMetadataKeys Removing intrinsics.Reflect.getOwnMetadataKeys Removing intrinsics.Reflect.deleteMetadata Removing intrinsics.%ArrayPrototype%.toReversed Removing intrinsics.%ArrayPrototype%.toSorted Removing intrinsics.%ArrayPrototype%.toSpliced Removing intrinsics.%ArrayPrototype%.with Removing intrinsics.%ArrayPrototype%.@@unscopables.toReversed Removing intrinsics.%ArrayPrototype%.@@unscopables.toSorted Removing intrinsics.%ArrayPrototype%.@@unscopables.toSpliced Removing intrinsics.%ArrayBufferPrototype%.transferToFixedLength Removing intrinsics.%ArrayBufferPrototype%.detached Removing intrinsics.%StringPrototype%.isWellFormed Removing intrinsics.%StringPrototype%.toWellFormed Removing intrinsics.%RegExpPrototype%.unicodeSets Removing intrinsics.%TypedArrayPrototype%.toReversed Removing intrinsics.%TypedArrayPrototype%.toSorted Removing intrinsics.%TypedArrayPrototype%.with ``` </details> <details> <summary>Notes on patch creation</summary> - `--exclude 'nothing'` to include `package.json` changes, then trim patch - `react-native` requires trimming majority of patch after initial diffs - upon failure on symlinks, `git clean -fdx` and re-create </details> ## **Related issues** Fixes - LavaMoat/docs#1 various issues - #3794 previous pr - LavaMoat/docs#12 various issues Worthy read for everyone on adding/upgrading libraries - endojs/endo#1855 ## **Manual testing steps** App functions normally ## **Screenshots/Recordings** ### **Before** Previously failing iOS (JSC) E2E tests have now been fixed - LavaMoat/docs#9 - https://github.com/MetaMask/metamask-mobile/assets/1881059/3cac630f-6ec8-4975-a273-8a115a4e8fe9 - https://github.com/MetaMask/metamask-mobile/assets/1881059/67221672-d1a3-4346-a783-5f93b53dbbe9 - https://github.com/MetaMask/metamask-mobile/assets/1881059/baa6e512-e307-4f0f-ae2f-77bfb4a29baf - https://github.com/MetaMask/metamask-mobile/assets/1881059/c21ffb0b-c9df-4223-ba73-5383dc8627f5 And more screenshots in related issues linked above ### **After** App functions normally --------- Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com>
|
Remaining tracked in |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This issue tracks the work to make LavaMoat compatible with React Native.
Tracker
this.call#8Further Reading
The text was updated successfully, but these errors were encountered: