From 6f7f8f36bcd451840a03ffd37271b0e35c188e4c Mon Sep 17 00:00:00 2001
From: Andrei Radu <47434163+AndreiMVP@users.noreply.github.com>
Date: Wed, 27 Sep 2023 18:31:46 +0300
Subject: [PATCH 1/4] chore: sandbox and arbitrable whitelist

---
 src/components/attachment.js        |  2 +-
 src/components/case-details-card.js |  6 +++
 src/temp/arbitrable-whitelist.js    | 77 +++++++++++++++++++++++++++++
 3 files changed, 84 insertions(+), 1 deletion(-)
 create mode 100644 src/temp/arbitrable-whitelist.js

diff --git a/src/components/attachment.js b/src/components/attachment.js
index aca39c7..86ca785 100644
--- a/src/components/attachment.js
+++ b/src/components/attachment.js
@@ -64,7 +64,7 @@ const Attachment = ({ URI, description, extension: _extension, previewURI, title
           <>
             {description}
             <Divider dashed />
-            <StyledIFrame frameBorder="0" src={previewURI} title="Attachment Preview" />
+            <StyledIFrame sandbox="" frameBorder="0" src={previewURI} title="Attachment Preview" />
           </>
         ) : (
           description
diff --git a/src/components/case-details-card.js b/src/components/case-details-card.js
index ae5b5d4..ff2dce1 100644
--- a/src/components/case-details-card.js
+++ b/src/components/case-details-card.js
@@ -25,6 +25,7 @@ import CourtDrawer from "./court-drawer";
 import EvidenceTimeline from "./evidence-timeline";
 import { getReadOnlyRpcUrl } from "../bootstrap/web3";
 import useGetDraws from "../hooks/use-get-draws";
+import arbitrableWhitelist from "../temp/arbitrable-whitelist";
 
 const { useDrizzle, useDrizzleState } = drizzleReactHooks;
 const { toBN, soliditySha3 } = Web3.utils;
@@ -664,6 +665,11 @@ export default function CaseDetailsCard({ ID }) {
                   <ReactMarkdown source={metaEvidence.metaEvidenceJSON.description} />
                   {metaEvidence.metaEvidenceJSON.evidenceDisplayInterfaceURI && (
                     <iframe
+                      sandbox={
+                        arbitrableWhitelist[chainId]?.find((i) => i === dispute.arbitrated.toLowerCase())
+                          ? "allow-scripts allow-same-origin"
+                          : "allow-scripts"
+                      }
                       title="dispute details"
                       style={{ width: "1px", minWidth: "100%", height: "360px", border: "none" }}
                       src={evidenceDisplayInterfaceURL}
diff --git a/src/temp/arbitrable-whitelist.js b/src/temp/arbitrable-whitelist.js
new file mode 100644
index 0000000..49065a0
--- /dev/null
+++ b/src/temp/arbitrable-whitelist.js
@@ -0,0 +1,77 @@
+const arbitrableWhitelist = {
+  1: [
+    "0x0d67440946949fe293b45c52efd8a9b3d51e2522",
+    "0x126697b552b83f08c7ebebae8d13eae2871e4e1e",
+    "0x135c573503f70dc290b1d60fe2e7f7eb114febd6",
+    "0x1e9c3b5f57974beadbd8c28ba918d85b8477c618",
+    "0x250aa88c8f54f5e70b94214380342f0d53e42f6c",
+    "0x2e3b10abf091cdc53cc892a50dabdb432e220398",
+    "0x2f0895732bfacdcf2fdb19962fe609d0da695f21",
+    "0x44863f5b7aab7cee181c0d84e244540125ef7af7",
+    "0x46580533db92c418a79f91b46df70283daef7f99",
+    "0x479083b5343ab89bb39608e3176d750c8a6957b5",
+    "0x4b89e798b10478a839ea0abcf86c4b94a3c782a4",
+    "0x594ec762b59978c97c82bc36ab493ed8b1f1f368",
+    "0x6341ec8f3f23689bd6ea3cf82fe34c3a0481c30a",
+    "0x68c4cc21378301cfdd5702d66d58a036d7bafe28",
+    "0x6e31d83b0c696f7d57241d3dffd0f2b628d14c67",
+    "0x6f15ca438992d9a4d7281e7e80381c4d904b2a24",
+    "0x701cabaf65ed3974925fb94988842a29d2ce7aa3",
+    "0x728cba71a3723caab33ea416cb46e2cc9215a596",
+    "0x776e5853e3d61b2dfb22bcf872a43bf9a1231e52",
+    "0x7884a7adf697e18357087fe8f994669042af4ae9",
+    "0x799cb978dea5d6ca00ccb1794d3c3d4c89e40cd1",
+    "0x7ecffaa0247227a29d613adb3b1b47e44f0f53cb",
+    "0x7f112a0dc0ac7be95ac3c58532485f60726bb42c",
+    "0x916deab80dfbc7030277047cd18b233b3ce5b4ab",
+    "0x941b4a0dfdc7f15275a4cb6913b395647bb69fc3",
+    "0x99489d7bb33539f3d1a401741e56e8f02b9ae0cf",
+    "0x99a0f0e0d9ee776d791d2e55c215d05ccf7286fc",
+    "0xa3e4348bddc32afcedc5e088e0e21fd6154a0180",
+    "0xab0d90943a58b1a64c0171ee8e743d9998be6ac3",
+    "0xb72103ee8819f2480c25d306eeab7c3382fba612",
+    "0xc25a0b9681abf6f090aed71a8c08fb564b41dab6",
+    "0xc5e9ddebb09cd64dfacab4011a0d5cedaf7c9bdb",
+    "0xc7e49251807780dfbbca72778890b80bd946590b",
+    "0xc9a3cd210cc9c11982c3acf7b7bf9b1083242cb6",
+    "0xcb4aae35333193232421e86cd2e9b6c91f3b125f",
+    "0xd47f72a2d1d0e91b0ec5e5f5d02b2dc26d00a14d",
+    "0xd7e143715a4244634d74201959372e81a3623a2a",
+    "0xd8bf5114796ed28aa52cff61e1b9ef4ec1f69a54",
+    "0xd8f8019c025c2ba6745543d9a3c338de1b98c103",
+    "0xe0cf18e8630545aa553f88079c75dae56b8fb304",
+    "0xe0e1bc8c6cd1b81993e2fcfb80832d814886ea38",
+    "0xe5bcea6f87aaee4a81f64dfdb4d30d400e0e5cf4",
+    "0xebcf3bca271b26ae4b162ba560e243055af0e679",
+    "0xf339047c85d0dd2645f2bd802a1e8a5e7af61053",
+    "0xf65c7560d6ce320cc3a16a07f1f65aab66396b9e",
+    "0xf72cfd1b34a91a64f9a98537fe63fbab7530adca",
+  ],
+  100: [
+    "0x01f292c270f1d477019e9b16465a7c411a160ca9",
+    "0x0b928165a67df8254412483ae8c3b8cc7f2b4d36",
+    "0x1128ed55ab2d796fa92d2f8e1f336d745354a77a",
+    "0x1d48a279966f37385b4ab963530c6dc813b3a8df",
+    "0x2a2bab2c2d4eb5007b0389720b287d4d19dc4001",
+    "0x2b6869e4f1d6104989f15da7454dbf7a01310bb8",
+    "0x2e39b8f43d0870ba896f516f78f57cde773cf805",
+    "0x2f19f817bbf800b487b7f2e51f24ad5ea0222463",
+    "0x464c84c41f3c25ba5a75b006d8b20600a8777306",
+    "0x54068a67441a950ff33afa5a3247acc7188d0789",
+    "0x54a92c21c6553a8085066311f2c8d9db1b5e6610",
+    "0x66260c69d03837016d88c9877e61e08ef74c59f2",
+    "0x70533554fe5c17caf77fe530f77eab933b92af60",
+    "0x76944a2678a0954a610096ee78e8ceb8d46d5922",
+    "0x86e72802d9abbf7505a889721fd4d6947b02320e",
+    "0x957a53a994860be4750810131d9c876b2f52d6e1",
+    "0xa2bfff0553de7405781fe0c39c04a383f04b9c80",
+    "0xa78ec5742a5d360f92f6d6d7e775fb35ab559a51",
+    "0xaeecfa44639b61d2e0a9534d918789d94a24a9de",
+    "0xc7add3c961f7935cb4914e37da991d2f1cd7986c",
+    "0xd5994f15be9987104d9821aa99d1c97227c7c08c",
+    "0xe04f5791d671d5c4e08ab49b39807087b591ea3e",
+    "0xf7de5537ecd69a94695fcf4bcdbdee6329b63322",
+  ],
+};
+
+export default arbitrableWhitelist;

From e7ef8447bbfaa7291b1eb7216e30542ea9582d3a Mon Sep 17 00:00:00 2001
From: Andrei Radu <47434163+AndreiMVP@users.noreply.github.com>
Date: Wed, 27 Sep 2023 18:46:57 +0300
Subject: [PATCH 2/4] refactor: includes instead of find

---
 src/components/case-details-card.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/case-details-card.js b/src/components/case-details-card.js
index ff2dce1..38a3ddf 100644
--- a/src/components/case-details-card.js
+++ b/src/components/case-details-card.js
@@ -666,7 +666,7 @@ export default function CaseDetailsCard({ ID }) {
                   {metaEvidence.metaEvidenceJSON.evidenceDisplayInterfaceURI && (
                     <iframe
                       sandbox={
-                        arbitrableWhitelist[chainId]?.find((i) => i === dispute.arbitrated.toLowerCase())
+                        arbitrableWhitelist[chainId]?.includes(dispute.arbitrated.toLowerCase())
                           ? "allow-scripts allow-same-origin"
                           : "allow-scripts"
                       }

From 1f892c5fd771a23e3410f9634375477e0b1717e0 Mon Sep 17 00:00:00 2001
From: Andrei Radu <47434163+AndreiMVP@users.noreply.github.com>
Date: Wed, 27 Sep 2023 19:17:10 +0300
Subject: [PATCH 3/4] chore: log arbitrable not included in whitelist

---
 src/components/case-details-card.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/components/case-details-card.js b/src/components/case-details-card.js
index 38a3ddf..11fe24e 100644
--- a/src/components/case-details-card.js
+++ b/src/components/case-details-card.js
@@ -189,6 +189,11 @@ export default function CaseDetailsCard({ ID }) {
   ]);
   const [committedVote, setCommittedVote] = useStoredCommittedVote();
 
+  useEffect(() => {
+    if (dispute.arbitrated && !arbitrableWhitelist[chainId]?.includes(dispute.arbitrated.toLowerCase()))
+      console.warn("Arbitrable not included in whitelist for evidence display");
+  }, [dispute.arbitrated, chainId]);
+
   useEffect(() => {
     let mounted = true;
 

From b3651b6011f80e9edf9439689e3543c307881863 Mon Sep 17 00:00:00 2001
From: Andrei Radu <47434163+AndreiMVP@users.noreply.github.com>
Date: Wed, 27 Sep 2023 21:18:13 +0300
Subject: [PATCH 4/4] chore: shorten whitelist

---
 src/temp/arbitrable-whitelist.js | 21 ---------------------
 1 file changed, 21 deletions(-)

diff --git a/src/temp/arbitrable-whitelist.js b/src/temp/arbitrable-whitelist.js
index 49065a0..c0dbe53 100644
--- a/src/temp/arbitrable-whitelist.js
+++ b/src/temp/arbitrable-whitelist.js
@@ -1,45 +1,27 @@
 const arbitrableWhitelist = {
   1: [
-    "0x0d67440946949fe293b45c52efd8a9b3d51e2522",
     "0x126697b552b83f08c7ebebae8d13eae2871e4e1e",
-    "0x135c573503f70dc290b1d60fe2e7f7eb114febd6",
-    "0x1e9c3b5f57974beadbd8c28ba918d85b8477c618",
     "0x250aa88c8f54f5e70b94214380342f0d53e42f6c",
     "0x2e3b10abf091cdc53cc892a50dabdb432e220398",
     "0x2f0895732bfacdcf2fdb19962fe609d0da695f21",
-    "0x44863f5b7aab7cee181c0d84e244540125ef7af7",
     "0x46580533db92c418a79f91b46df70283daef7f99",
-    "0x479083b5343ab89bb39608e3176d750c8a6957b5",
-    "0x4b89e798b10478a839ea0abcf86c4b94a3c782a4",
     "0x594ec762b59978c97c82bc36ab493ed8b1f1f368",
     "0x6341ec8f3f23689bd6ea3cf82fe34c3a0481c30a",
     "0x68c4cc21378301cfdd5702d66d58a036d7bafe28",
-    "0x6e31d83b0c696f7d57241d3dffd0f2b628d14c67",
-    "0x6f15ca438992d9a4d7281e7e80381c4d904b2a24",
     "0x701cabaf65ed3974925fb94988842a29d2ce7aa3",
     "0x728cba71a3723caab33ea416cb46e2cc9215a596",
     "0x776e5853e3d61b2dfb22bcf872a43bf9a1231e52",
-    "0x7884a7adf697e18357087fe8f994669042af4ae9",
     "0x799cb978dea5d6ca00ccb1794d3c3d4c89e40cd1",
     "0x7ecffaa0247227a29d613adb3b1b47e44f0f53cb",
-    "0x7f112a0dc0ac7be95ac3c58532485f60726bb42c",
     "0x916deab80dfbc7030277047cd18b233b3ce5b4ab",
-    "0x941b4a0dfdc7f15275a4cb6913b395647bb69fc3",
-    "0x99489d7bb33539f3d1a401741e56e8f02b9ae0cf",
-    "0x99a0f0e0d9ee776d791d2e55c215d05ccf7286fc",
     "0xa3e4348bddc32afcedc5e088e0e21fd6154a0180",
     "0xab0d90943a58b1a64c0171ee8e743d9998be6ac3",
-    "0xb72103ee8819f2480c25d306eeab7c3382fba612",
-    "0xc25a0b9681abf6f090aed71a8c08fb564b41dab6",
     "0xc5e9ddebb09cd64dfacab4011a0d5cedaf7c9bdb",
-    "0xc7e49251807780dfbbca72778890b80bd946590b",
     "0xc9a3cd210cc9c11982c3acf7b7bf9b1083242cb6",
     "0xcb4aae35333193232421e86cd2e9b6c91f3b125f",
     "0xd47f72a2d1d0e91b0ec5e5f5d02b2dc26d00a14d",
     "0xd7e143715a4244634d74201959372e81a3623a2a",
     "0xd8bf5114796ed28aa52cff61e1b9ef4ec1f69a54",
-    "0xd8f8019c025c2ba6745543d9a3c338de1b98c103",
-    "0xe0cf18e8630545aa553f88079c75dae56b8fb304",
     "0xe0e1bc8c6cd1b81993e2fcfb80832d814886ea38",
     "0xe5bcea6f87aaee4a81f64dfdb4d30d400e0e5cf4",
     "0xebcf3bca271b26ae4b162ba560e243055af0e679",
@@ -48,9 +30,7 @@ const arbitrableWhitelist = {
     "0xf72cfd1b34a91a64f9a98537fe63fbab7530adca",
   ],
   100: [
-    "0x01f292c270f1d477019e9b16465a7c411a160ca9",
     "0x0b928165a67df8254412483ae8c3b8cc7f2b4d36",
-    "0x1128ed55ab2d796fa92d2f8e1f336d745354a77a",
     "0x1d48a279966f37385b4ab963530c6dc813b3a8df",
     "0x2a2bab2c2d4eb5007b0389720b287d4d19dc4001",
     "0x2b6869e4f1d6104989f15da7454dbf7a01310bb8",
@@ -67,7 +47,6 @@ const arbitrableWhitelist = {
     "0xa2bfff0553de7405781fe0c39c04a383f04b9c80",
     "0xa78ec5742a5d360f92f6d6d7e775fb35ab559a51",
     "0xaeecfa44639b61d2e0a9534d918789d94a24a9de",
-    "0xc7add3c961f7935cb4914e37da991d2f1cd7986c",
     "0xd5994f15be9987104d9821aa99d1c97227c7c08c",
     "0xe04f5791d671d5c4e08ab49b39807087b591ea3e",
     "0xf7de5537ecd69a94695fcf4bcdbdee6329b63322",