sneak 9d97fa9d66 fix: a permit on the zero address never reads as ETH (closes #660) ...

Permit2 has no allowance of ETH, but the swap decoder read a permit's
zero-address token as ETH. Its Allowance token line read ETH. A permit of
1 wei of the zero address before a V4 step of 5 ETH stood as the Amount
figure, which then read 0.000000000000000001 ETH. With that permit to
another spender, there was no Amount line.

Such a permit now never stands as the Amount figure. To another spender,
it no longer removes the Amount line either. Its lines give the amount in
base units and name the zero address, as for a token nothing knows.

Model: opus-5-5

2026-10-27 03:28:19 +00:00

..

addressWarnings.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

alarms.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

amountDisplay.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

approvalAmount.js

harden: a token scale above 80 decimal places is refused as unknown (closes #350)

2026-10-04 21:43:11 +02:00

approvalTx.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

approvalVerify.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

balances.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

browserApi.js

fix: an open popup follows a network switch the background saves (closes #650)

2026-10-21 04:26:51 +02:00

buildInfo.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

chainSwitch.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

chainSwitchFields.js

fix: an open popup follows a network switch the background saves (closes #650)

2026-10-21 04:26:51 +02:00

constants.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

domainHash.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

ens.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

etherscanLabels.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

holders.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

html.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

log.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

networks.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

persistedState.js

feat: an "Allow weak passwords" setting lets a new wallet have a short password (closes #674)

2026-10-26 22:35:02 +01:00

phishingBlocklist.json

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

phishingDomains.js

fix: a listed site ending in a dot gets the phishing warning (closes #534)

2026-10-14 10:48:41 +02:00

prices.js

fix: read USD prices from Chainlink price feeds through the RPC endpoint (closes #525)

2026-10-27 04:23:17 +01:00

restorableViews.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

scamlist.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

state.js

fix: AutistMask does not work in Firefox private windows (closes #646)

2026-10-26 23:51:22 +01:00

stateSchema.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

storedSettings.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

symbolDisplay.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

symbolSpoof.js

chore: the native token's label follows the network (closes #372)

2026-10-05 01:26:04 +02:00

tokenList.js

fix: read USD prices from Chainlink price feeds through the RPC endpoint (closes #525)

2026-10-27 04:23:17 +01:00

transactions.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

transferAmount.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

txValidation.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

uniswap.js

fix: a permit on the zero address never reads as ETH (closes #660)

2026-10-27 03:28:19 +00:00

vault.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

wallet.js

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 18:22:12 +02:00

walletDefects.js

fix: the defective xprv wallet notice names the keys that still reach its addresses (closes #255)

2026-10-14 11:48:46 +02:00

walletDelete.js

fix: a site allowed without Remember stays connected when the background worker idles (closes #526)

2026-10-18 23:59:24 +02:00