clawbot 43784cab3f harden: resolve or refuse the swap token scale instead of guessing 18 (closes #340) ...

tokenInfo() returned decimals 18 for any token absent from the bundled list, so the swap approval line rendered a real 1000.00 of a 6-decimal token as 0.000000000001. The scale is now resolved from what the wallet already holds (bundled list, tracked tokens, explorer-reported decimals) or refused outright, matching the rule set for the ERC-20 path in #306. A refusal reuses unknownDecimalsAmount(), so it reads as "base units (decimals unknown)" with no decimal point and no symbol, and the same string propagates to rawValue so no downstream screen can render a figure the approval screen refused. No new network call on the approval path. Verified green on all three CI contexts: check, e2e-chrome, e2e-firefox.

2026-08-23 16:20:22 +02:00

..

e2e

release: produce a versioned per-browser artifact and pin the Chrome extension id (closes #310)

2026-08-23 16:13:22 +02:00

addressValue.test.js

fix: an address holding only unpriced tokens is no longer totalled at $0.00 (closes #261)

2026-08-17 08:38:10 +02:00

alarms.test.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

approvalAmount.test.js

fix: resolve approval-screen token decimals, and refuse to format an unknown scale (closes #306)

2026-08-20 12:57:38 +02:00

approvalDisplayFloor.test.js

fix: never render a nonzero approval amount as zero (closes #322)

2026-08-23 15:43:04 +02:00

approvalTx.test.js

harden: verify the signed transaction against what the popup displayed (closes #216)

2026-08-12 12:15:25 +02:00

approvalVerify.test.js

fix: one transaction approval at a time, and honest copy for a nonce collision (closes #271)

2026-08-17 08:38:26 +02:00

backgroundApproval.test.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

backNavigation.test.js

fix: render the view "Back" lands on after the popup is reopened (closes #268)

2026-08-14 06:14:09 +02:00

balanceLineEscaping.test.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

chainSwitchGate.test.js

fix: gate the chain switch and remember endpoints per network (closes #308)

2026-08-20 12:42:01 +02:00

coldWorkerChainId.test.js

fix: answer eth_chainId and net_version from loaded state (closes #317)

2026-08-20 13:11:48 +02:00

coldWorkerChainSwitch.test.js

fix: gate the chain switch and remember endpoints per network (closes #308)

2026-08-20 12:42:01 +02:00

constants.test.js

build: assert DEBUG is off in every emitted bundle as a post-build check (closes #170)

2026-08-10 16:15:22 +02:00

deleteAddress.test.js

fix: an address holding only unpriced tokens is no longer totalled at $0.00 (closes #261)

2026-08-17 08:38:10 +02:00

deleteWalletLostPassword.test.js

fix: give a wallet whose password is lost a way out, and say the password cannot be reset (closes #312)

2026-08-20 15:12:28 +02:00

dustThreshold.test.js

fix: explain a rejected dust threshold instead of silently snapping back (closes #233)

2026-08-12 11:29:09 +02:00

etherscanLabels.test.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

exportPrivkey.test.js

fix: one password-failure message across every screen (closes #172)

2026-08-12 12:03:39 +02:00

extensionId.test.js

release: produce a versioned per-browser artifact and pin the Chrome extension id (closes #310)

2026-08-23 16:13:22 +02:00

holders.test.js

fix: distinguish an unknown holder count from zero so a legitimate token is not filtered (closes #230)

2026-08-12 10:34:45 +02:00

htmlEscape.test.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

inpageErrors.test.js

fix: carry EIP-1193 error codes through to the page (closes #274)

2026-08-12 13:47:33 +02:00

manifest.test.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

networkEndpoints.test.js

fix: gate the chain switch and remember endpoints per network (closes #308)

2026-08-20 12:42:01 +02:00

packaging.test.js

release: produce a versioned per-browser artifact and pin the Chrome extension id (closes #310)

2026-08-23 16:13:22 +02:00

passwordMessages.test.js

fix: one wording for an empty password field on every screen (closes #265)

2026-08-17 08:59:59 +02:00

phishingDomains.test.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

popupElementIds.test.js

test: drive the Settings screen in a browser and guard every popup element id (closes #229)

2026-08-17 09:14:59 +02:00

sendTokenSelect.test.js

fix: distinguish an unknown holder count from zero so a legitimate token is not filtered (closes #230)

2026-08-12 10:34:45 +02:00

settingsUtcTimestamps.test.js

fix: move the UTC Timestamps checkbox into the Display well (closes #212)

2026-08-11 15:34:16 +02:00

showPhrase.test.js

feat: password-gated recovery phrase display for HD wallets (closes #161)

2026-08-11 15:25:17 +02:00

state.test.js

fix: filter the restored view stack against RESTORABLE_VIEWS (closes #224)

2026-08-12 12:07:48 +02:00

stateMerge.test.js

fix: merge state per field instead of overwriting the whole blob (closes #304)

2026-08-20 16:41:19 +02:00

symbolSpoof.test.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

transactions.test.js

fix: a shared ticker no longer hides one of its two real tokens (closes #276)

2026-08-12 13:31:55 +02:00

transferAmount.test.js

fix: sign the ERC-20 amount the confirmation screen displayed (closes #305)

2026-08-20 12:31:28 +02:00

txStatus.test.js

fix: WaitTx timeout no longer overwrites a rendered success screen (closes #155)

2026-08-12 10:58:36 +02:00

txValidation.test.js

fix: count the network fee in the confirm-screen balance check (closes #154)

2026-08-11 15:41:37 +02:00

uniswap.test.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

uniswapUnknownDecimals.test.js

harden: resolve or refuse the swap token scale instead of guessing 18 (closes #340)

2026-08-23 16:20:22 +02:00

vault.test.js

test: known-answer coverage for HD derivation and the vault (closes #159)

2026-08-11 15:06:35 +02:00

vaultBackend.test.js

fix: run libsodium on WebAssembly under the extension CSP (closes #182)

2026-08-12 10:30:15 +02:00

version.test.js

release: produce a versioned per-browser artifact and pin the Chrome extension id (closes #310)

2026-08-23 16:13:22 +02:00

wallet.test.js

fix: enforce the base58 checksum and reject non-master extended keys (closes #210)

2026-08-11 15:31:50 +02:00

walletDefects.test.js

fix: explain a stored non-master xprv wallet instead of throwing at signing time (closes #234)

2026-08-12 10:41:49 +02:00

walletDelete.test.js

feat: remove an address from an HD wallet, behind a confirmation (closes #162)

2026-08-12 11:16:29 +02:00