Steps to reproduce:

1. Go to https://dashcore.info/
2. In the language list in the footer, click "Japanese" or "Deutsch".

What should happen:

The top navbar should remain on one line.

What actually happens:

The navbar breaks onto two lines between the search and status boxes.

UI nice, but how I can see and control my wallet information (see transactions, address, do received...) with web?

Thanks.

instruction on readme call for:

➜  npm install -g dashcore-node
npm ERR! code E404
npm ERR! 404 Not Found: dashcore-node@latest

npm ERR! A complete log of this run can be found in:
npm ERR!     /Users/mmm/.npm/_logs/2018-08-16T20_37_16_784Z-debug.log

which is 404 as you can see above. What is the recomended way to install dashcore-node ?

ref: https://github.com/dashevo/insight-ui#getting-started

can we update main.min.css with DASH colors?

recreate

Attempt to broadcast raw hex tx using UI at http://devnet-evonet-28309188.us-west-2.elb.amazonaws.com:3001/insight/tx/send

Page says 'loading' and nothing happens...

What:

IS transactions appear as unconfirmed in Red until they are included in the first block.

Expected:

IS transactions should be displayed as confirmed by Instant Send

How to reproduce:

1 - make a IS transaction
2 - get the tx id
3 - paste tx into insight.dash.org/insight search box
4 - the transaction details will be displayed, but as unconfirmed transaction.

Reasonale

IS is a flag feature of DASH. It speaks poorly if the official block explorer still doesn't support it after years.

All the guides show how to set it up with local host is there any resource on a domain lol

If you paste in this address: XkbRp5aT5vGnYi7obCGvmX2FAQV34u6Dfw, it just continually tries to load something.

Looks like the problem is that it's attempting to parse an address as a block based on the API endpoint it's trying to hit.

https://insight.dash.org/insight-api/block/XkbRp5aT5vGnYi7obCGvmX2FAQV34u6Dfw

^^ Pulled from console error log

Some error when accessing /insight/status page. See picture. How to fix?

Hi all,
When I try to coonect RPC with bad Port, :3001/insight is can't open page, dash core is work, because gen. address.
Any ideas?
Because if bad guys try to connect with my IP and incorrectly port, they down insight.

Thanks

Hey guys!

I got same error: #20 in search bar. I trying search address but i see UI trying search block and I see 404 error in console: ".../insight-api/block/MUKtt1tiVmihethhgXVn5PMusyRPwJ61eM 404 (Not Found)".
This example address for my coin: MUKtt1tiVmihethhgXVn5PMusyRPwJ61eM
I use insight-ui for my coin based on Dash.
I snifed traffic from insight-api to my coind, and I see what coind return error with code: 500.
Traffic screenshot:

Can because of that be a problem with the search?

I use:
insight-api v2.0.1
insight-ui 2.0.0

Thanks! Best regards!

Hello,

So I have set everything properly, I launched 2 insight versions for BTC and LTC.
All required libraries, dependencies are met, when I start the node, I get this error.

bitcore-node-dash start

[2017-07-14T16:29:27.544Z] info: Using config: /home/ubuntu/insight/bitcore-node-dash.json
[2017-07-14T16:29:27.545Z] info: Using network: livenet
[2017-07-14T16:29:27.546Z] info: Starting bitcoind
[2017-07-14T16:29:27.548Z] info: Using bitcoin config file: /home/ubuntu/insight/data/dash.conf
[2017-07-14T16:29:27.551Z] info: Starting dash process
[2017-07-14T16:29:27.561Z] error: Error: spawn /home/ubuntu/.nvm/versions/node/v4.8.4/lib/node_modules/bitcore-node-dash/lib/scaffold/data/dashd ENOENT
    at exports._errnoException (util.js:907:11)
    at Process.ChildProcess._handle.onexit (internal/child_process.js:189:32)
    at onErrorNT (internal/child_process.js:363:16)
    at nextTickCallbackWith2Args (node.js:511:9)
    at process._tickCallback (node.js:425:17)

Take for example our testnet mining address: http://insight.testnet.networks.dash.org:3001/insight/address/yVXDAM73Tg6A44Bm3qduXsMCYxzuqBCT48

It will only show ~10 transactions and will not load additional pages, this is also seen on mainnet insight

Summary:
Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. JavaScript allows all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. Properties on the Object.prototype are then inherited by all the JavaScript objects through the prototype chain. When that happens, this leads to either denial of service by triggering JavaScript exceptions, or it tampers with the application source code to force the code path that the attacker injects, thereby leading to remote code execution.

Title - Prototype pollution attack[CVE-2019-10768]

Vulnerable URL:-https://explorer.dash.org/insight/

Steps To Reproduce:
1.Create/signup your account and check angularjs
2.Open console and put this payload
angular.merge({}, JSON.parse('{"proto": {"xxx": "polluted"}}'));
console.log(({}).xxx);

References:-
https://security.snyk.io/vuln/SNYK-JS-ANGULAR-534884
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10768

Impact:-
Then it will let the attacker get access to sensitive information by polluting the scope with the isAdmin property. If the attacker changes some existing attribute to an unexpected return type (say toString attribute to return type integer) it will cause your application to crash (Denial of Service) or if you are using your server for code execution like node.js exec or eval then it might even lead to Remote code execution(RCE)

Fix:
Freeze the prototype— use Object.freeze (Object.prototype).

Require schema validation of JSON input.

Avoid using unsafe recursive merge functions.

Consider using objects without prototypes (for example, Object.create(null)), breaking the prototype chain and preventing pollution.

As a best practice use Map instead of Object.

This address: yUV8W2RmEbKZD8oD7YMeBNiydHWmormCDj

On evo it shows no sent transactions: https://testnet-insight.dashevo.org/insight/address/yUV8W2RmEbKZD8oD7YMeBNiydHWmormCDj

On my dash node it shows that I have received transactions from that address

The transactions were posted via dashevo.

If we decide to look up for a random non-existant transaction (/insight/tx/0000000001219cb882504216cb0b89de6567483e7a6a3bce45026b26fca9ff17 for instance), we do not have anything warning us about it.

We are only left with this :

There is a flashMessage that is being triggered in the Transaction.get method that seems to not be displayed.
Which seems to be linked to the logic being broken, it appears that many method such as Transaction.get(), expect failureCallback to be called on exception such as a status page being 404.
What really happens is that it goes into the successCallback that do not expect thoses and fails.

Some investigation is needed.

Hi

Please help me.
Whenever i am installing bitcore-node-dash i am getting this error.

[email protected] preinstall /home/afzal/.nvm/versions/node/v4.8.4/lib/node_modules/bitcore-node-dash
> ./scripts/download

sh: 1: ./scripts/download: Permission denied
npm ERR! Linux 3.16.0-30-generic
npm ERR! argv "/home/afzal/.nvm/versions/node/v4.8.4/bin/node" "/home/afzal/.nvm/versions/node/v4.8.4/bin/npm" "install" "-g" "bitcore-node-dash"
npm ERR! node v4.8.4
npm ERR! npm  v2.15.11
npm ERR! code ELIFECYCLE

npm ERR! [email protected] preinstall: `./scripts/download`
npm ERR! Exit status 126
npm ERR! 
npm ERR! Failed at the [email protected] preinstall script './scripts/download'.
npm ERR! This is most likely a problem with the bitcore-node-dash package,
npm ERR! not with npm itself.
npm ERR! Tell the author that this fails on your system:
npm ERR!     ./scripts/download
npm ERR! You can get information on how to open an issue for this project with:
npm ERR!     npm bugs bitcore-node-dash
npm ERR! Or if that isn't available, you can get their info via:
npm ERR! 
npm ERR!     npm owner ls bitcore-node-dash
npm ERR! There is likely additional logging output above.

npm ERR! Please include the following file with any support request:
npm ERR!     /home/afzal/npm-debug.log

Looks like the initial sync Start Date is broken.

It also appears that the Initial Blockchain Height and Synced Blocks are also broken, or not displaying the correct information for each data point.

I used dash to transfer some funds but its been days now but still no funds added...i dont know how this will be handle but pls do handle it. Thanks

The network response from https://insight.dash.org/insight-api/messages/verify is {"result": true}, but the site just keeps displaying "Loading...". Apparently this is a Javascript error, the following is shown in the browser console (Firefox 68).

TypeError: "$http.post(...).success is not a function"
    verify https://insight.dash.org/insight/js/main.min.js:3
    Angular 7
        recurse
        e
        $eval
        $apply
        compile
        sg
        d
angularjs-all.min.js:3:57395
    Angular 6
        e
        get
        $apply
        compile
        sg
        d

I'm getting this from https://insight.dash.org when trying to use Instant Send:

Second argument must be numeric (maxfeerate) and no longer supports a boolean. To allow a transaction with high fees, set maxfeerate to 0.. Code:-8

The request looks like this:

let reqObj = {
  method: "POST",
  url: `${baseUrl}/insight-api-dash/tx/sendix`,
  form: {
    rawtx: hexTx,
  },
};

Since I'm sending a hex tx and the error message is about positional arguments to a function call, which makes me think that Dash Insight is out of sync with the latest deployed version of dashd or some such, on the Dash Insight server.

It stopped working Sunday, ostensibly when Dash Insight was upgraded to v18?

It sounds like there's somewhere that maxfeerate is set to false and instead needs to be set to 0.

Hello,https://insight.dash.org/insight/, this website no longer available?,

http://testnet-insight.dashevo.org/insight/address/yNQbkMSsQC2D9NHoi3fTGB1CTvXNR79ku4

https://discord.com/channels/670271785974890526/718217459144065045/804863516942008393

I have a python program to make many JSON requests at http://localhost:3001/insight-api/tx/
However after a while I won't get any more replies, but get
{'status': 429, 'error': 'Rate limit exceeded'}
Also dashcore-node log shows
warn: Rate limited: { name: '::ffff:127.0.0.1', type: 'normal', visits: 10801 }
Only way to recover is to kill the node and restart it.
Any way to get around this?