feat: WIP! EWM-497

.github/workflows/app-deploy.yaml

@@ -22,13 +22,13 @@ on:
         required: true
         default: release
         type: choice
-        options: [release, debug]
+        options: [ release, debug ]
       flavor:
         description: 'Target flavor:'
         required: true
         default: staging
         type: choice
-        options: [development, staging, production]
+        options: [ development, staging, production ]
 
 jobs:
   setup:
@@ -155,6 +155,16 @@ jobs:
           echo "ios_target is set to = ${{ env.ios_target }}"
           echo "build_mode is set to = ${{ inputs.build_mode }}"
 
+      - name: Remove default anti_phishing.json
+        run: |
+          rm -f assets/config/anti_phishing.json
+
+      - name: Download anti-phishing file
+        uses: actions/download-artifact@v4
+        with:
+          name: anti-phishing-json
+          path: assets/config
+
       - name: Setup Flutter
         uses: subosito/flutter-action@v2
         with:
@@ -281,6 +291,25 @@ jobs:
       - name: Display flavor target
         run: echo "Flavor target is = ${{ inputs.flavor }}"
 
+      - name: Fetch & merge anti-phishing lists
+        run: |
+          curl -s https://raw.githubusercontent.com/broxus/ever-wallet-anti-phishing/master/blacklist.json \
+            -o /tmp/blacklist1.json
+          curl -s https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/refs/heads/main/src/config.json \
+            -o /tmp/config.json
+          mkdir -p assets/config
+          jq -s '(.[0] + .[1].blacklist) | unique | { blacklist: . }' \
+            /tmp/blacklist1.json /tmp/config.json \
+            > assets/config/anti_phishing.json
+          echo "→ New anti_phishing.json:"
+          head -n 5 assets/config/anti_phishing.json
+
+      - name: Flutter clean
+        run: flutter clean
+
+      - name: Get Flutter packages
+        run: dart pub get
+
       - name: Build and deploy
         run: |
           bash scripts/build.sh \

.github/workflows/create-release.yaml

@@ -0,0 +1,142 @@
+name: Create release brunch
+
+on:
+  workflow_dispatch:
+    inputs:
+      version_type:
+        description: 'Version bump'
+        required: true
+        default: 'patch'
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+
+jobs:
+  start-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Download and merge anti-phishing blacklists
+        run: |
+          mkdir -p temp
+
+          echo "Downloading Broxus blacklist..."
+          curl -s https://raw.githubusercontent.com/broxus/ever-wallet-anti-phishing/master/blacklist.json -o temp/broxus_blacklist.json || exit 1
+
+          echo "Downloading MetaMask blacklist..."
+          curl -s https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/refs/heads/main/src/config.json -o temp/metamask_config.json
+
+          cat temp/broxus_blacklist.json | jq -r '.[]' > temp/broxus_entries.txt
+
+          cat temp/metamask_config.json | jq -r '.blacklist[]' > temp/metamask_entries.txt
+
+          broxus_count=$(wc -l < temp/broxus_entries.txt)
+          metamask_count=$(wc -l < temp/metamask_entries.txt)
+
+          cat temp/broxus_entries.txt temp/metamask_entries.txt | sort -u > temp/merged_entries.txt
+
+          final_count=$(wc -l < temp/merged_entries.txt)
+
+          echo "[" > assets/configs/anti_phishing.json
+
+          while IFS= read -r line; do
+            # Escape special characters for JSON
+            escaped_line=$(echo "$line" | sed 's/\\/\\\\/g; s/"/\\"/g')
+            echo "  \"$escaped_line\"," >> assets/configs/anti_phishing.json
+          done < temp/merged_entries.txt
+
+          sed -i '$s/,$//' assets/configs/anti_phishing.json
+          echo "]" >> assets/configs/anti_phishing.json
+
+          echo "Merged $broxus_count Broxus entries and $metamask_count MetaMask entries into $final_count unique entries"
+
+          rm -rf temp
+
+      - name: Update version in pubspec.yaml
+        run: |
+          current_version=$(grep '^version:' pubspec.yaml | sed 's/version: //')
+          echo "Current version: $current_version"
+
+          IFS='.' read -r major minor patch <<< "$current_version"
+
+          case "${{ github.event.inputs.version_type }}" in
+            major)
+              major=$((major + 1))
+              minor=0
+              patch=0
+              ;;
+            minor)
+              minor=$((minor + 1))
+              patch=0
+              ;;
+            patch)
+              patch=$((patch + 1))
+              ;;
+          esac
+
+          new_version="$major.$minor.$patch"
+          echo "New version: $new_version"
+
+          sed -i "s/^version: .*/version: $new_version/" pubspec.yaml
+
+          # Store version for next steps
+          echo "NEW_VERSION=$new_version" >> $GITHUB_ENV
+
+      - name: Create release branch and commit
+        run: |
+          branch_name="release/v${{ env.NEW_VERSION }}"
+          git checkout -b "$branch_name"
+
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+
+          git add assets/configs/anti_phishing.json pubspec.yaml
+
+          git commit -m "chore(release): start release v${{ env.NEW_VERSION }}
+
+          - Update anti-phishing blacklist from upstream sources
+          - Bump version to ${{ env.NEW_VERSION }} (${{ github.event.inputs.version_type }})
+
+          Sources:
+          - Broxus ever-wallet-anti-phishing
+          - MetaMask eth-phishing-detect"
+
+          git push origin "$branch_name"
+
+      - name: Create Pull Request
+        run: |
+          gh pr create \
+            --title "chore(release): start release v${{ env.NEW_VERSION }}" \
+            --body "$(cat <<EOF
+
+          - Start release process for version ${{ env.NEW_VERSION }}
+          - Updated anti-phishing blacklist from upstream sources
+          - Bumped version (${{ github.event.inputs.version_type }}) in pubspec.yaml
+
+          - \`assets/configs/anti_phishing.json\`: Updated with latest blacklist entries
+          - \`pubspec.yaml\`: Version bumped to ${{ env.NEW_VERSION }}
+
+          - Type: **${{ github.event.inputs.version_type }}**
+          - New version: **${{ env.NEW_VERSION }}**
+
+          - [Broxus ever-wallet-anti-phishing](https://github.com/broxus/ever-wallet-anti-phishing)
+          - [MetaMask eth-phishing-detect](https://github.com/MetaMask/eth-phishing-detect)
+
+          - [ ] Review and test changes
+          - [ ] Merge to dev when ready
+          - [ ] Create release tag and deploy
+
+          🤖 This release PR was created manually via GitHub Actions
+          EOF
+          )" \
+            --base dev \
+            --head "release/v${{ env.NEW_VERSION }}" \
+            --label "🚀 release"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

assets/configs/anti_phishing.json

@@ -0,0 +1,16 @@
+{
+  "blacklist": [
+    "everscan.com",
+    "octsubridge.io",
+    "octus-bridge.com",
+    "protocoloctusbridge.com",
+    "octlusbridge.com",
+    "bridge-octus.org",
+    "internal-meeting.online",
+    "pancake-ever.com",
+    "gravixguard.github.io",
+    "gravixguard.web.app",
+    "broxus.net",
+    "chainconnect.app"
+  ]
+}

assets/html/anti_phishing.html

@@ -0,0 +1,76 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+    <title>SparX Wallet Phishing Detection</title>
+    <style>
+        body {
+          margin: 0;
+          padding: 20px;
+          background-color: #f0f0f0;
+          font-family: Arial, sans-serif;
+          color: #333;
+        }
+        .container {
+          max-width: 800px;
+          margin: 0 auto;
+          background-color: #fff;
+          border-radius: 4px;
+          box-shadow: 0 2px 6px rgba(0,0,0,0.1);
+          padding: 24px;
+        }
+        h1 {
+          margin-top: 0;
+          font-size: 1.8rem;
+        }
+        p {
+          line-height: 1.6;
+          margin-bottom: 1em;
+        }
+        a {
+          color: #0066cc;
+          text-decoration: none;
+        }
+        a:hover {
+          text-decoration: underline;
+        }
+    </style>
+</head>
+<body>
+<div class="container">
+    <h1>SparX Wallet Phishing Detection</h1>
+    <p>
+        This domain is currently on the SparX Wallet domain warning list. This means
+        that based on information available to us, SparX Wallet believes this domain
+        could currently compromise your security and, as an added safety feature,
+        SparX Wallet has restricted access to the site. To override this, please read
+        the rest of this warning for instructions on how to continue at your own risk.
+    </p>
+    <p>
+        There are many reasons sites can appear on our warning list, and our warning
+        list compiles from other widely used industry lists. Such reasons can include
+        known fraud or security risks, such as domains that test positive on the
+        SparX Wallet Phishing Detection. Domains on these warning lists may include
+        outright malicious websites and legitimate websites that have been compromised
+        by a malicious actor.
+    </p>
+    <p>
+        To read more about this site please
+        <a href="https://cryptoscamdb.org/search">
+            search for the domain on CryptoScamDB
+        </a>.
+    </p>
+    <p>
+        Note that this warning list is compiled on a voluntary basis. This list may be
+        inaccurate or incomplete. Just because a domain does not appear on this list is
+        not an implicit guarantee of that domain's safety. As always, your transactions
+        are your own responsibility. If you wish to interact with any domain on our
+        warning list, you can do so by
+        <a href="{PHISHING_ORIGINAL_SITE}">
+            continuing at your own risk
+        </a>.
+    </p>
+</div>
+</body>
+</html>