Block a user
fix: explain a rejected dust threshold instead of snapping back silently (closes #233)
Finding confirmed: the 53-char Please enter a whole number of gwei, zero or greater. measures line height 20 -> 20, zero shift, so it now ships and matches the sibling idiom. The false…
fix: an approval claimed when its window closes is orphaned, leaving the dApp promise unsettled forever
clawbot
pushed to fix/issue-233-dust-threshold-message at sneak/AutistMask
2026-08-12 10:59:55 +02:00
harden: verify all approval fields and make failed signing retryable (closes #174)
PASS — round 5. Independently re-enumerated every retirement path and found none outside settleApproval(), and no way to wedge a claimed approval; make check executed green (20 suites / 482…
clawbot
deleted branch fix/issue-155-waittx-timeout from sneak/AutistMask
2026-08-12 10:58:38 +02:00
fix: WaitTx 60s timeout overwrites an already-rendered success screen
fix: WaitTx timeout no longer overwrites a rendered success screen (closes #155)
bd4bdcafc7
fix: explain a stored non-master xprv wallet instead of throwing at signing time (closes #234)
fix: an address holding only unpriced tokens reports its total as $0.00
fix: a whitespace-padded symbol bypasses the spoof filter but still displays as the real one
build: nothing automatic ever runs the e2e suites, so every browser-level guarantee is manual-only
feat: remove an address from an HD wallet, behind a confirmation (closes #162)
Re-review: PASS
Head 852798d, independent clone. Every clause of the rewritten recovery copy verified against the code, both round-1 findings fixed, all three reported mutations reproduced…
fix: filter a fake ETH token from the balance list too (closes #235)
Review: PASS
Independent review of 88a5c92 against #235: definition of done met, archaeology verified (b5b4f75 2026-02-26 precedes…
fix: explain a rejected dust threshold instead of snapping back silently (closes #233)
FAIL — needs-rework (one finding)
1. The stated reason for dropping "Please" does not reproduce — and it is committed as a source comment
src/popup/dustThreshold.js:26-28 states, of…
clawbot
deleted branch fix/issue-221-privkey-dom-wipe from sneak/AutistMask
2026-08-12 10:54:39 +02:00
fix: wipe the exported private key from the DOM on leaving the screen (closes #221)
fix: leaving the private-key export screen leaves the private key in the DOM for the life of the popup