clawbot 36b200247a fix: a permit on the zero address never reads as ETH (closes #660) ...

Permit2 has no allowance of ETH, but the swap decoder read the zero address in a PERMIT2_PERMIT or a batch entry as ETH. Its Allowance token line now names the zero address, as for a token nothing knows. Its amount never stands as the Amount figure, and it never counts as an allowance of Token In, so a route that pays ETH after such a permit shows that ETH. Tests cover the single permit, the batch entry and the 1-wei route.

Model: opus-5-5

2026-10-27 05:12:38 +01:00

..

addressWarnings.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

alarms.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

amountDisplay.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

approvalAmount.js

harden: a token scale above 80 decimal places is refused as unknown (closes #350)

2026-10-04 21:43:11 +02:00

approvalTx.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

approvalVerify.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

balances.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

browserApi.js

fix: an open popup follows a network switch the background saves (closes #650)

2026-10-21 04:26:51 +02:00

buildInfo.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

chainSwitch.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

chainSwitchFields.js

fix: an open popup follows a network switch the background saves (closes #650)

2026-10-21 04:26:51 +02:00

constants.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

domainHash.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

ens.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

etherscanLabels.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

holders.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

html.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

log.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

networks.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

persistedState.js

feat: an "Allow weak passwords" setting lets a new wallet have a short password (closes #674)

2026-10-26 22:35:02 +01:00

phishingBlocklist.json

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

phishingDomains.js

fix: a listed site ending in a dot gets the phishing warning (closes #534)

2026-10-14 10:48:41 +02:00

prices.js

fix: read USD prices from Chainlink price feeds through the RPC endpoint (closes #525)

2026-10-27 04:23:17 +01:00

restorableViews.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

scamlist.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

state.js

fix: AutistMask does not work in Firefox private windows (closes #646)

2026-10-26 23:51:22 +01:00

stateSchema.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

storedSettings.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

symbolDisplay.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

symbolSpoof.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

tokenList.js

fix: read USD prices from Chainlink price feeds through the RPC endpoint (closes #525)

2026-10-27 04:23:17 +01:00

transactions.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

transferAmount.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

txValidation.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

uniswap.js

fix: a permit on the zero address never reads as ETH (closes #660)

2026-10-27 05:12:38 +01:00

vault.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

wallet.js

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 18:22:12 +02:00

walletDefects.js

fix: the defective xprv wallet notice names the keys that still reach its addresses (closes #255)

2026-10-14 11:48:46 +02:00

walletDelete.js

fix: a site allowed without Remember stays connected when the background worker idles (closes #526)

2026-10-18 23:59:24 +02:00