sneak 66cae2e593 fix: each PERMIT2_TRANSFER_FROM shows the amount it moves and where to (closes #611) ...

The swap decoder now gives three lines for every PERMIT2_TRANSFER_FROM
it reads, after the swap's Amount line: the amount moved from the
sender, the token with its address, and where it goes (the router, the
V2 pair the next swap spends, the sender, or the address itself on a
line of its own). Before, a move to another address or to the next V2
pair showed no amount at all. Who counts as paid, and so Min. received
against Min. paid out, is unchanged. tokenMovedLine() moves to module
level and takes its label as an argument.

Model: opus-5-5

2026-10-19 20:31:32 +00:00

..

addressWarnings.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

alarms.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

amountDisplay.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

approvalAmount.js

harden: a token scale above 80 decimal places is refused as unknown (closes #350)

2026-10-04 21:43:11 +02:00

approvalTx.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

approvalVerify.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

balances.js

fix: a token symbol read off a contract is never stored cut mid-emoji (closes #458)

2026-10-06 23:59:21 +02:00

browserApi.js

fix: a site allowed without Remember stays connected when the background worker idles (closes #526)

2026-10-18 23:59:24 +02:00

buildInfo.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

chainSwitch.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

chainSwitchFields.js

fix: tracked tokens are kept per network, and bundled picks are offered on mainnet only (closes #523)

2026-10-19 11:50:39 +02:00

constants.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

domainHash.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

ens.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

etherscanLabels.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

holders.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

html.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

log.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

networks.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

persistedState.js

fix: tracked tokens are kept per network, and bundled picks are offered on mainnet only (closes #523)

2026-10-19 11:50:39 +02:00

phishingBlocklist.json

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

phishingDomains.js

fix: a listed site ending in a dot gets the phishing warning (closes #534)

2026-10-14 10:48:41 +02:00

prices.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

restorableViews.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

scamlist.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

state.js

fix: tracked tokens are kept per network, and bundled picks are offered on mainnet only (closes #523)

2026-10-19 11:50:39 +02:00

stateSchema.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

symbolDisplay.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

symbolSpoof.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

tokenList.js

chore: bring the token-list enrichment tooling into script/lib (closes #495)

2026-10-14 20:10:30 +02:00

transactions.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

transferAmount.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

txValidation.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

uniswap.js

fix: each PERMIT2_TRANSFER_FROM shows the amount it moves and where to (closes #611)

2026-10-19 20:31:32 +00:00

vault.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

wallet.js

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 18:22:12 +02:00

walletDefects.js

fix: the defective xprv wallet notice names the keys that still reach its addresses (closes #255)

2026-10-14 11:48:46 +02:00

walletDelete.js

fix: a site allowed without Remember stays connected when the background worker idles (closes #526)

2026-10-18 23:59:24 +02:00