sneak c56179abff fix: a WRAP_ETH says where its ETH goes (closes #747) ...

A WRAP_ETH into the router now always reads `Moved to: The router`. That is
true whichever step then takes the WETH. Other takes keep
`The swap step that spends it`.

A later WRAP_ETH of CONTRACT_BALANCE to anyone but the router now gets a
`Moved from the sender` line reading `All the ETH the transaction carries`,
and `Moved to` names the recipient. It gets none after an UNWRAP_WETH into
the router, or while the router holds ETH from a V4 step.

README states both rules.

Model: opus-5-5

2026-11-03 14:07:59 +00:00

..

addressWarnings.js

fix: a confirmation screen drawn again keeps the network it was reviewed for (closes #586)

2026-10-19 07:38:15 +02:00

alarms.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

amountDisplay.js

docs: code comments name the headings README has now (closes #724)

2026-11-03 14:03:31 +01:00

approvalAmount.js

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)

2026-11-03 03:41:15 +01:00

approvalTx.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

approvalVerify.js

fix: failed requests reach the page with an error code and the node's data (closes #533)

2026-10-18 22:12:10 +02:00

balances.js

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)

2026-11-03 03:41:15 +01:00

browserApi.js

docs: code comments name the headings README has now (closes #724)

2026-11-03 14:03:31 +01:00

buildInfo.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

chainSwitch.js

fix: the ETH line reads unknown at an address no refresh has read (closes #736)

2026-11-03 11:24:18 +01:00

chainSwitchFields.js

fix: the ETH line reads unknown at an address no refresh has read (closes #736)

2026-11-03 11:24:18 +01:00

constants.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

domainHash.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

ens.js

fix: a popup reload no longer logs the requests it cancels on most screens (closes #475)

2026-10-06 22:09:08 +02:00

etherscanLabels.js

fix: Blockscout and Etherscan lookups are off until the user turns them on (closes #668)

2026-10-26 21:38:29 +01:00

holders.js

harden: a holders_count that is not plain digits is unknown, not read in part (closes #251)

2026-10-05 02:59:15 +02:00

html.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

log.js

harden: debug mode logs only a request's origin and JSON-RPC method (closes #410)

2026-10-04 21:09:04 +02:00

networks.js

chore: remove dead exports and share copied view helpers (closes #168)

2026-10-05 09:09:06 +02:00

persistedState.js

feat: an "Allow weak passwords" setting lets a new wallet have a short password (closes #674)

2026-10-26 22:35:02 +01:00

phishingBlocklist.json

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

phishingDomains.js

fix: a listed site ending in a dot gets the phishing warning (closes #534)

2026-10-14 10:48:41 +02:00

prices.js

fix: the ETH line reads unknown at an address no refresh has read (closes #736)

2026-11-03 11:24:18 +01:00

restorableViews.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

scamlist.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

state.js

fix: a save merges this page's tracked token change into the stored list (closes #717)

2026-11-03 05:59:42 +01:00

stateSchema.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

storedSettings.js

fix: a transaction history that lands after a network switch is dropped (closes #657)

2026-11-02 23:41:24 +01:00

symbolDisplay.js

chore: escape every value the views write as markup, and cut symbols on code points (closes #329)

2026-10-05 10:43:06 +02:00

symbolSpoof.js

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)

2026-11-03 03:41:15 +01:00

tokenList.js

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)

2026-11-03 03:41:15 +01:00

transactions.js

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)

2026-11-03 03:41:15 +01:00

transferAmount.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

txValidation.js

fix: the confirmation screen reads its balance on the network it is drawn for (closes #558)

2026-10-19 09:54:09 +02:00

uniswap.js

fix: a WRAP_ETH says where its ETH goes (closes #747)

2026-11-03 14:07:59 +00:00

vault.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

wallet.js

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 18:22:12 +02:00

walletDefects.js

fix: the defective xprv wallet notice names the keys that still reach its addresses (closes #255)

2026-10-14 11:48:46 +02:00

walletDelete.js

fix: a site allowed without Remember stays connected when the background worker idles (closes #526)

2026-10-18 23:59:24 +02:00