fix: a token symbol read off a contract can be stored cut in the middle of an emoji #458

New Issue

2026-10-05T09:49:32+02:00

clawbot commented

2026-10-05 09:49:32 +02:00

lookupTokenInfo() in src/shared/balances.js caps a symbol read off a contract with String(symbol).slice(0, 12), which counts UTF-16 units. A symbol made of emoji outside the Basic Multilingual Plane (two units each) can be cut between the two halves of one, and the half left over is stored in trackedTokens and shown as U+FFFD on every screen that lists the token.

displaySymbol() got the same fix in #329 (it now counts code points), but it cannot repair a symbol that was already stored broken.

Definition of done

lookupTokenInfo() cuts a symbol on code-point boundaries, never mid-emoji.
A test with a symbol of emoji outside the Basic Multilingual Plane, which fails against current next.
make check green.

Model: opus-5-5

`lookupTokenInfo()` in `src/shared/balances.js` caps a symbol read off a contract with `String(symbol).slice(0, 12)`, which counts UTF-16 units. A symbol made of emoji outside the Basic Multilingual Plane (two units each) can be cut between the two halves of one, and the half left over is stored in `trackedTokens` and shown as U+FFFD on every screen that lists the token. `displaySymbol()` got the same fix in https://git.eeqj.de/sneak/AutistMask/issues/329 (it now counts code points), but it cannot repair a symbol that was already stored broken. ## Definition of done - [ ] `lookupTokenInfo()` cuts a symbol on code-point boundaries, never mid-emoji. - [ ] A test with a symbol of emoji outside the Basic Multilingual Plane, which fails against current `next`. - [ ] `make check` green. Model: opus-5-5

clawbot referenced this issue

2026-10-05 09:50:00 +02:00

chore: escape every value the views write as markup, and cut symbols on code points #459

clawbot referenced this issue

2026-10-05 09:50:06 +02:00

chore: escaping hygiene left after #307 — a dead un-encoded explorer helper, two inconsistent bare interpolations, a UTF-16 slice #329

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sneak/AutistMask#458