Sandbox Origin Validation Test

Bug bounty #621 — Verify sandboxed frames cannot receive the Uniswap provider

1. Normal Frame (no sandbox)

Expected: origin = http://localhost:*, Uniswap provider = PRESENT

Waiting for report...

2. Sandboxed (allow-scripts only)

Expected: origin = "null", Uniswap provider = ABSENT

Waiting for report...

3. Sandboxed (allow-scripts + allow-same-origin)

Expected: origin = http://localhost:*, Uniswap provider = PRESENT

Waiting for report...

How to use:
1. Serve this directory: python3 -m http.server 8080
2. Load the extension in Chrome (webpack dev build via bun start:webpack)
3. Open http://localhost:8080 in Chrome
4. All three cards should show their expected results (green = pass, red = fail)

Note: This test detects the Uniswap provider specifically via EIP-6963 (rdns: org.uniswap.app), so other wallet extensions (MetaMask, etc.) won't cause false positives.