clients/apps/browser/src
Alex 41c547015d
[PM-32843] Fix phishing blocker not blocking HTTPS variants of HTTP URLs (#19265)
* fix(phishing): check alternate protocol when matching URLs against block list

The phishing blocker's IndexedDB lookup only checked the exact URL href.
When the block list contains http:// entries but the browser auto-redirects
to https://, the lookup failed silently. This adds O(1) alternate-protocol
lookups (swapping http:// ↔ https://) with the same trailing-slash
normalization.

[PM-32843]

* test(phishing): add unit tests for alternate-protocol URL matching

Covers HTTP→HTTPS and HTTPS→HTTP matching, trailing slash normalization
with protocol swap, short-circuit when exact match is found, no false
positives, and non-HTTP protocol handling.

[PM-32843]
2026-03-16 11:21:50 -07:00
..
_locales [PM-32661] Update Transfer Items Dialog (#19498) 2026-03-11 16:19:09 -05:00
admin-console/types Remove deprecated factory methods (#9077) 2024-05-20 09:07:39 +10:00
auth [PM-27297] Remove ConsolidatedSessionTimeoutComponent feature flag (#18616) 2026-03-10 13:09:35 -05:00
autofill [PM-31646] stop label collection from crossing into sibling form-field containers (#19452) 2026-03-16 15:23:29 +00:00
background [PM-31630] Fix native messaging state management (#18987) 2026-03-06 09:59:41 -06:00
billing [PM-27600] Replace Hard-Coded Storage amount (#17393) 2025-12-02 10:49:55 -05:00
browser [deps] Autofill: Update prettier to v3 (#7014) 2023-11-29 16:15:20 -05:00
dirt/phishing-detection [PM-32843] Fix phishing blocker not blocking HTTPS variants of HTTP URLs (#19265) 2026-03-16 11:21:50 -07:00
images [PM-14571] At Risk Passwords - Badge Update (#15983) 2025-09-02 15:09:20 -05:00
key-management [PM-27283] [BEEEP] Reactive availableVaultTimeoutActions$ in vault timeout settings (#17731) 2026-01-27 10:28:13 +00:00
models Delete unused models (#18063) 2025-12-19 09:33:40 -06:00
platform [PM-24047] Make popout windows respect vault timeout when unfocused (#19019) 2026-03-11 14:10:32 +01:00
popup [PM-24047] Make popout windows respect vault timeout when unfocused (#19019) 2026-03-11 14:10:32 +01:00
safari [BRE-1530] Updating certificate name from 8bit to Bitwarden (#19380) 2026-03-04 16:16:12 -05:00
tools/popup PM-31202 implmeneted password modal menu (#18829) 2026-03-10 19:26:49 -04:00
types [AC-1011] Admin Console / Billing code ownership (#4973) 2023-03-22 10:03:50 -05:00
vault [Vault] Update event-related import statements (#19546) 2026-03-14 09:10:57 +10:00
managed_schema.json [SM-88] [BEEEP] Add support for chrome.storage.managed for environment urls (#3120) 2022-08-08 07:40:09 -04:00
manifest.json Bumped client version(s) 2026-02-23 11:48:40 +00:00
manifest.v3.json Bumped client version(s) 2026-02-23 11:48:40 +00:00