sneak 4fd55f0f38 fix: eth_sign's warning and the README say what it signs (closes #409) ...

eth_sign is signed as an EIP-191 personal message over its data, which is
what the Ethereum JSON-RPC specification defines it to return. Its warning
on the signature prompt said the site was asking to sign a raw hash that
could drain funds, and the README said the same; neither was true. The
warning now says the site used the older eth_sign method and that the data
will be signed as a personal message, and the README's SignApproval section
says so too. A test pins that eth_sign is read address first and data
second, and that the page receives the personal message signature over the
data.

Model: opus-5-5

2026-10-14 06:20:56 +00:00

..

addressDetail.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

addressToken.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

addToken.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

addWallet.js

fix: show every password error in its own fixed-height line (closes #493)

2026-10-07 10:59:16 +02:00

approval.js

fix: eth_sign's warning and the README say what it signs (closes #409)

2026-10-14 06:20:56 +00:00

confirmTx.js

test: cover every control that refuses a defective wallet (closes #254)

2026-10-05 12:59:15 +02:00

deleteAddress.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

deleteWallet.js

fix: show every password error in its own fixed-height line (closes #493)

2026-10-07 10:59:16 +02:00

exportPrivkey.js

fix: show every password error in its own fixed-height line (closes #493)

2026-10-07 10:59:16 +02:00

helpers.js

fix: only the user switches the wallet's network (closes #408)

2026-10-08 07:30:16 +02:00

home.js

fix: a popup reload mid-refresh no longer logs the requests it cancels (closes #218)

2026-10-06 09:43:09 +02:00

receive.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

send.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

settings.js

fix: switching the network in Settings tells open pages (closes #500)

2026-10-08 09:13:16 +02:00

settingsAddToken.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

showPhrase.js

fix: show every password error in its own fixed-height line (closes #493)

2026-10-07 10:59:16 +02:00

stateRecovery.js

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

2026-10-05 00:09:06 +02:00

transactionDetail.js

fix: only the user switches the wallet's network (closes #408)

2026-10-08 07:30:16 +02:00

txStatus.js

fix: only the user switches the wallet's network (closes #408)

2026-10-08 07:30:16 +02:00

welcome.js

Split popup into one file per view

2026-02-25 18:51:41 +07:00