Input validation (#37)

* validate npub

* validate txid

* validate address

* validate nsec

* validate Amount

* validate fee rate

* validate transaction

* validate signature

* validate timelock

* validate esplora

* tailwind

* persistent default endpoint

* always make sure that the escrow type is valid

* better lints and remove unused serde

* bump version to 0.2.0

* ci: add dependabot

Author: storopoli

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "monthly"

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "scrow"
-version = "0.1.1"
+version = "0.2.0"
 edition = "2024"
 authors = [
     "Jose Storopoli <[email protected]>",
@@ -20,7 +20,6 @@ bitcoin = { version = "0.32.5", default-features = false, features = [
 ] }
 secp256k1 = { version = "0.29.0", features = ["global-context"] }
 nostr = "0.39.0"
-serde = { version = "1.0.218", features = ["derive"] }
 thiserror = "2.0.11"
 esplora-client = { version = "0.11.0", default-features = false, features = [
     "tokio",
@@ -48,8 +47,15 @@ web = ["dioxus/web"]
 desktop = ["dioxus/desktop"]
 mobile = ["dioxus/mobile"]
 
-[lints.rust]
-unsafe_code = "forbid" # Forbid unsafe code
+[lints]
+rust.missing_debug_implementations = "warn"
+rust.rust_2018_idioms = { level = "deny", priority = -1 }
+rust.unreachable_pub = "warn"
+rust.unused_crate_dependencies = "deny"
+rust.unused_must_use = "deny"
+rust.unsafe_code = "forbid"
+rust.missing_docs = "warn"
+rustdoc.all = "warn"
 
 [profile.release]
 opt-level = "z"   # Optimized for size, use 3 for speed

Cargo.toml

@@ -1,6 +1,5 @@
 //! Broadcast escrow transaction component.
 
-use bitcoin::hex::prelude::*;
 use bitcoin::{Transaction, consensus};
 use dioxus::prelude::*;
 
@@ -51,8 +50,8 @@ pub(crate) fn Broadcast() -> Element {
                                             #[cfg(debug_assertions)]
                                             info!(% ESPLORA_ENDPOINT, "Created esplora client");
                                             let esplora_client = create_client(&ESPLORA_ENDPOINT.read()).unwrap();
-                                            let signed_tx: Transaction = consensus::deserialize(
-                                                    Vec::from_hex(&signed_tx.read()).unwrap().as_ref(),
+                                            let signed_tx: Transaction = consensus::encode::deserialize_hex(
+                                                    &signed_tx.read(),
                                                 )
                                                 .unwrap();
                                             let txid = signed_tx.compute_txid();

assets/tailwind.css

@@ -1,6 +1,5 @@
 //! Combine escrow signatures component.
 
-use bitcoin::hex::prelude::*;
 use bitcoin::{Transaction, consensus, hex::DisplayHex};
 use dioxus::prelude::*;
 
@@ -122,8 +121,8 @@ pub(crate) fn Combine() -> Element {
                                             let npub_buyer = parse_npub(&npub_buyer.read()).unwrap();
                                             let npub_seller = parse_npub(&npub_seller.read()).unwrap();
                                             let escrow_type = parse_escrow_type(&escrow_type.read()).unwrap();
-                                            let unsigned_tx: Transaction = consensus::deserialize(
-                                                    Vec::from_hex(&unsigned_tx.read()).unwrap().as_ref(),
+                                            let unsigned_tx: Transaction = consensus::encode::deserialize_hex(
+                                                    &unsigned_tx.read(),
                                                 )
                                                 .unwrap();
                                             let signatures: Vec<schnorr::Signature> = vec![