Conversation
Co-authored-by: niil <niilptr@users.noreply.github.com>
…nt the LegacyMsg interface
04644c2 to
06abbeb
Compare
|
Hi all, I am a member of Firmachain. I just mention about a small peace. Check this one, plz |
|
First, I appreciate all these contributions @dimiandre. I have a few questions to make sure I understand these updates.
|
| newIcaHostParams := icahosttypes.Params{ | ||
| HostEnabled: true, | ||
| // https://github.com/cosmos/ibc-go/blob/v4.2.0/docs/apps/interchain-accounts/parameters.md#allowmessages | ||
| AllowMessages: []string{"*"}, |
There was a problem hiding this comment.
We don't need to set the Allow Messages directly not "*"
like below example
| AllowMessages: []string{"*"}, | |
| AllowMessages: ["/cosmos.gov.v1.Vote"], |
There was a problem hiding this comment.
If you want just the cosmos.gov.v1.Vote message to be allowed, we can change it to this. Can I proceed to set AllowMessages to ["/cosmos.gov.v1.Vote"]?
There was a problem hiding this comment.
I wonder about the vulnerability when we set this as a *. If it doesn't, * is okay.
And, I don't exactly know what governance features require us to use messages when operating interchain. I think we could leave it as a * for now.
There was a problem hiding this comment.
@koofree There should be no vulnerability in using * (at least in theory), since this is the configuration used by gaia and juno for example.
If you want to be more conservative, we could use the approach that is used by osmosis, which allows the following cosmos/ibc/wasm messages at the moment:
- /ibc.applications.transfer.v1.MsgTransfer
- /cosmos.bank.v1beta1.MsgSend
- /cosmos.staking.v1beta1.MsgDelegate
- /cosmos.staking.v1beta1.MsgBeginRedelegate
- /cosmos.staking.v1beta1.MsgCreateValidator
- /cosmos.staking.v1beta1.MsgEditValidator
- /cosmos.staking.v1beta1.MsgUndelegate
- /cosmos.distribution.v1beta1.MsgWithdrawDelegatorReward
- /cosmos.distribution.v1beta1.MsgSetWithdrawAddress
- /cosmos.distribution.v1beta1.MsgWithdrawValidatorCommission
- /cosmos.distribution.v1beta1.MsgFundCommunityPool
- /cosmos.gov.v1beta1.MsgVote
- /cosmwasm.wasm.v1.MsgExecuteContract
- /cosmwasm.wasm.v1.MsgInstantiateContract
- /cosmos.authz.v1beta1.MsgGrant
- /cosmos.authz.v1beta1.MsgRevoke
There was a problem hiding this comment.
Hi @niilptr! I clearly understood. If we can choose the conservative way, I have no doubt doing that way. Can we go on your suggestion?
|
Hi @koofree, thanks for the feedbacks! I will answer to your previous questions here:
|
|
@niilptr I appreciate all the answers about this PR. Through it, I highly understand this upgrade. At the answer 3, I don't think it needs to be back to this upgrade. |
No description provided.