Injector v4.8.0: Hash checksum and version verification

CHANGELOG.md

@@ -1,5 +1,11 @@
 # GooseMod Changelog
 
+## v4.8.0 [2020-11-02]
+
+  - ### Features
+    - Added hash checksum and version checking on initation for security / verification
+
+
 ## v4.7.0 [2020-11-02]
 
   - ### Features

src/index.js

@@ -92,9 +92,19 @@ const init = async function () {
   this.disabledModules = {};
 
   this.lastVersion = localStorage.getItem('goosemodLastVersion');
-  this.version = '4.7.0';
+  this.version = '4.8.0';
   this.versionHash = '<hash>'; // Hash of built final js file is inserted here via build script
 
+  const latestInjectVersionInfo = await (await fetch('https://goosemod-api.netlify.app/injectVersion.json')).json();
+
+  if (latestInjectVersionInfo.version !== this.version) {
+    this.showToast('Warning: Version number does not match latest public release', {timeout: 3000});
+  }
+
+  if (latestInjectVersionInfo.hash !== this.versionHash) {
+    this.showToast('Warning: Version hash does not match latest public release', {timeout: 3000});
+  }
+
   if (this.lastVersion && this.lastVersion !== this.version) {
     this.goosemodChangelog.show();
   }