sneak 978e8e49d8 fix: Back from Settings no longer lands on a secret screen left by the gear (closes #461) ...

Leaving the private key export or recovery phrase screen drops the
selection it was showing, but the settings gear had just pushed the
screen onto the Back stack, so Back from Settings landed on a password
prompt that could only fail. Each screen's leave handler now also takes
it off the top of the stack, which is what a reopened popup already does
to these screens. Back from Settings goes to the address screen for the
export screen; for the recovery phrase screen, opened from Settings, it
stays on Settings once, as after a reopen.

Jest tests drive the gear and then Back for both screens, and
leavePrivkeyScreen() in the e2e suite expects the address screen.

Model: opus-5-5

2026-10-06 17:53:12 +00:00

..

e2e

fix: Back from Settings no longer lands on a secret screen left by the gear (closes #461)

2026-10-06 17:53:12 +00:00

support

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

addressValue.test.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

addWalletSeparatePassword.test.js

fix: say a second wallet's password is separate when one is chosen (closes #374)

2026-09-21 21:11:09 +02:00

alarms.test.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

approvalAmount.test.js

test: a token scale of zero decimals is used, not skipped (closes #325)

2026-10-05 05:43:05 +02:00

approvalDisplayFloor.test.js

fix: never render a nonzero approval amount as zero (closes #322)

2026-08-23 15:43:04 +02:00

approvalNonce.test.js

harden: ignore a nonce the page supplies with eth_sendTransaction (closes #404)

2026-10-04 18:43:04 +02:00

approvalOrigin.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

approvalTx.test.js

harden: ignore a nonce the page supplies with eth_sendTransaction (closes #404)

2026-10-04 18:43:04 +02:00

approvalVerify.test.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

backgroundApproval.test.js

fix: open an approval window while another one has focus (closes #290)

2026-10-05 08:26:06 +02:00

backgroundStateIsolation.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

backgroundStateLintRule.test.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

backNavigation.test.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

balanceLineEscaping.test.js

chore: re-vendor canonical files from prompts at dd4027b (closes #472)

2026-10-06 15:59:21 +02:00

balanceRefreshCancelled.test.js

fix: a popup reload mid-refresh no longer logs the requests it cancels (closes #218)

2026-10-06 09:43:09 +02:00

buildForbiddenInputs.test.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

buildWatch.test.js

fix: make dev rebuilds dist/ on source changes (closes #332)

2026-10-06 03:43:18 +02:00

chainSwitchGate.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

coldWorkerChainId.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

coldWorkerChainSwitch.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

coldWorkerSendTransaction.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

confirmTxFeeBound.test.js

harden: bound the total network fee by gasLimit × fee, on both send paths (closes #399)

2026-09-21 21:45:34 +02:00

constants.test.js

build: assert DEBUG is off in every emitted bundle as a post-build check (closes #170)

2026-08-10 16:15:22 +02:00

contractCreation.test.js

harden: drop 'unsafe-inline' from style-src (closes #328)

2026-10-05 15:26:06 +02:00

debugBanner.test.js

chore: keep the internal view id out of the release banner (closes #375)

2026-09-22 00:45:06 +02:00

debugFetch.test.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

deleteAddress.test.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

deleteWalletLostPassword.test.js

harden: lost-password confirmation refuses empty input and ignores invisible characters (closes #336)

2026-10-05 03:26:05 +02:00

dustThreshold.test.js

chore: re-vendor canonical files from prompts at dd4027b (closes #472)

2026-10-06 15:59:21 +02:00

etherscanLabels.test.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

exportPrivkey.test.js

fix: Back from Settings no longer lands on a secret screen left by the gear (closes #461)

2026-10-06 17:53:12 +00:00

extensionId.test.js

harden: keep the test recovery phrase out of release bundles, match committed keys by content (closes #351)

2026-09-21 18:29:39 +02:00

fabricatedDecimals.test.js

fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)

2026-09-21 21:28:06 +02:00

flashLine.test.js

fix: keep the flash line to its one line at any message length (closes #252)

2026-10-04 10:22:51 +02:00

holders.test.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

htmlEscape.test.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

inpageErrors.test.js

fix: refuse an unsupported method with EIP-1193 code 4200 (closes #279)

2026-10-04 09:24:41 +02:00

inpageProviderUuid.test.js

security: announce a fresh EIP-6963 provider UUID per page load (closes #398)

2026-10-03 16:26:39 +02:00

manifest.test.js

harden: drop 'unsafe-inline' from style-src (closes #328)

2026-10-05 15:26:06 +02:00

nativeCurrency.test.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

networkEndpoints.test.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

packaging.test.js

fix: declare and ship toolbar icons, so neither browser renders a puzzle piece (closes #371)

2026-08-23 21:26:14 +02:00

passwordMessages.test.js

fix: one wording for an empty password field on every screen (closes #265)

2026-08-17 08:59:59 +02:00

persistedEntryFloors.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

persistedFieldContract.test.js

test: the popup boot's stand-in for filterTransactions returns the real shape (closes #429)

2026-10-05 01:59:16 +02:00

personalSignDisplay.test.js

harden: show a personal message's hex and its text in byte order, hidden characters marked (closes #403)

2026-10-04 22:09:07 +02:00

phishingDomains.test.js

chore: re-vendor canonical files from prompts at dd4027b (closes #472)

2026-10-06 15:59:21 +02:00

popupElementIds.test.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

proxyMethods.test.js

chore: drop eth_chainId and net_version from PROXY_METHODS (closes #326)

2026-10-06 00:48:45 +02:00

resolveTokenSymbol.test.js

fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)

2026-09-21 21:28:06 +02:00

rpcErrorLog.test.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

rpcOrigin.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

sendDisplayFloor.test.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

sendMax.test.js

feat: a "Max" button on the Send screen (closes #198)

2026-10-05 07:43:06 +02:00

sendTokenSelect.test.js

fix: distinguish an unknown holder count from zero so a legitimate token is not filtered (closes #230)

2026-08-12 10:34:45 +02:00

settingsEndpointCheck.test.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

settingsUtcTimestamps.test.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

showPhrase.test.js

fix: Back from Settings no longer lands on a secret screen left by the gear (closes #461)

2026-10-06 17:53:12 +00:00

state.test.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

stateMerge.test.js

fix: a change made while an earlier save is running is stored (closes #448)

2026-10-05 04:43:06 +02:00

stateRecovery.test.js

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

2026-10-05 00:09:06 +02:00

stateSchema.test.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

stateUnusableRpc.test.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

symbolSpoof.test.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

timestampDisplay.test.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

transactions.test.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

transferAmount.test.js

harden: a token scale above 80 decimal places is refused as unknown (closes #350)

2026-10-04 21:43:11 +02:00

txStatus.test.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

txValidation.test.js

feat: a "Max" button on the Send screen (closes #198)

2026-10-05 07:43:06 +02:00

typedDataPermit.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00

uniswap.test.js

fix: a swap deadline later than a date can hold is stated in words (closes #437)

2026-10-04 23:43:06 +02:00

uniswapTokenOut.test.js

fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)

2026-09-21 21:28:06 +02:00

uniswapUndeterminedTokenIn.test.js

harden: state an undetermined swap input token as undetermined, not as ETH (closes #357)

2026-08-23 20:23:05 +02:00

uniswapUndeterminedTokenOut.test.js

harden: state an undetermined V4 output token as undetermined, not as ETH (closes #353)

2026-08-23 18:13:20 +02:00

uniswapUnknownDecimals.test.js

harden: a token scale above 80 decimal places is refused as unknown (closes #350)

2026-10-04 21:43:11 +02:00

unknownScaleDisplay.test.js

fix: store an absent explorer decimals as unknown instead of fabricating 18 (closes #349)

2026-08-23 21:19:04 +02:00

unknownScaleSend.test.js

fix: say an unknown-scale balance the same way on Send and on confirm (closes #377)

2026-10-04 15:59:15 +02:00

vault.test.js

chore: re-vendor canonical files from prompts at dd4027b (closes #472)

2026-10-06 15:59:21 +02:00

vaultBackend.test.js

fix: run libsodium on WebAssembly under the extension CSP (closes #182)

2026-08-12 10:30:15 +02:00

version.test.js

release: produce a versioned per-browser artifact and pin the Chrome extension id (closes #310)

2026-08-23 16:13:22 +02:00

wallet.test.js

harden: keep the test recovery phrase out of release bundles, match committed keys by content (closes #351)

2026-09-21 18:29:39 +02:00

walletDefects.test.js

test: cover every control that refuses a defective wallet (closes #254)

2026-10-05 12:59:15 +02:00

walletDelete.test.js

harden: key remembered site permissions by full origin (closes #402)

2026-10-04 18:09:04 +02:00