issues's People
issues's Issues
Testnet getgems not sync created collection and NFT
Bug Type
Functional
Reproduction steps
- create collection with ton-x and Sandbox wallet.
- Mint NFT with ton-x and Sandbox wallet.
- Check the transaction on TonApi and the txs succeed. (https://testnet.tonapi.io/transaction/14f7cb18c6571c38e78738e612cbea650a9010f7b50388e4c3166a1b4d44293b)
- Check the testnet.getgems.io and the collection and NFT not exists.(https://testnet.getgems.io/collection/kQCouclf8YfgO3R_2cXlOtMdx4HIEWBZhVhNR_Ki15fW53L8)
Actual result
Collection creation and NFT mint txs succeed, check the testnet.getgems.io and the collection and NFT not exists.
Expected result
The collection and NFT will display on testnet.getgems.
Suggested Severity
High
Device
Desktop (please complete the following information):
- OS: [ iOS]
- Browser [chrome]
Additional Context
I tried collection creation and NFT mint with ton-x before and after some time, it shows on testnet.getgems (https://testnet.getgems.io/collection/UQC27NxV69phhaMim7c8tWai0KO0KlZr_r8yL6x18TB4xOZK).
But i try again they didn't show on testnet.getgems. which is wired. Please help with ASAP. Thanks.
GetGems_Уточнение информации на сайте
Bug Type
UX
Reproduction steps
- заходим на страницу FAQ https://telegra.ph/Getgemsio-FAQ-rus-04-27
- п. 32 про нулевые адреса
- п. 19 про аукционы
- п. 15 информация по созданию кошельков
Actual result
п. 2
выдает 2 адреса
EQD__________________________________________0vo
EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9c
п. 3
Написано, что аукционы не реализованы
п. 4
Даны отсылки к мобильным устройствам
Expected result
п. 2
есть еще 1 нулевой адрес
EQCFgZBg6CjMMNbH24pXvLN_1mVStlnu6UT3iBwzf0M--QzC
DNS имя данного адреса
CryptoBlackHole.ton
п. 3
Аукционы появились, нужно обновить информацию
п. 4
Добавить возможность открытия кошельков с ПК
Suggested Severity
Low
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.125
Additional Context
Extend error message for NFTs that can be transferend only from specified marketplace
Bug Type
UI
Reproduction steps
For reproduce this issue you need to get NFT, what can be transfer only from the specified marketplace.
For example, this NFT have specified marketplace in metadata from there it can be sent:
EQDe-Xg6ZvC5737oNu3mcuEslRtgF5o7LDulaeYu78LKUnF_
- Select NFT to Transfer
- Transfer NFT and sing transaction with Tonkeeper
- Wait until transaction fails
Actual result
GetGems shows error in transaction and suggest to repeat it after 10 mins or contact support.
Expected result
GetGems shows message, that this NFT can be transfer only from specified marketplace.
Suggested Severity
Medium
Device
Desktop (please complete the following information):
- OS: macOS High Sierra 10.13.6
- Browser: Chrome
- Version: 105.0.5195.102
Smartphone (please complete the following information):
- Device: iPhone XR
- OS: 16.0
- Browser: Safari
- Version: 16
Additional Context
This issue have connections to this issue: tonkeeper/wallet#15
Previously removed NFT by Getgems moderators, still displays in collected NFTs
Bug Type
UI
Reproduction steps
- Open My NFTs in Getgems web-bot
- Open original NFT
- Go back
- Open previously removed NFT (by Getgems moderators)
- Make sure that time passes and there is no information with collection attributes
2022-09-19.01-55-02.mp4
Actual result
We see picture of previously removed NFT (previously reported by users like fake collection) in list. We see only loading status and no any information with atributes.
Expected result
Deleted NFT should not displayed, because it already was deleted by Getgems moderators in 29th of June. Deleted link on fake NFT: https://getgems.io/collection/EQDG27UruxsvO28c4kqZsOIFM-xBr_EsFcvBdKuE0lh49viR
Suggested Severity
Medium
Device
OS: Windows 10
Browser: Chrome
Version 105.0.5195.127 (Official Build) (64-bit)
Additional Context
Over time, the number of NFTs deleted by moderators may grow and users will be uncomfortable seeing them in their wallets. The scenario of confusion when sending NFTs to other wallets is not excluded.
No way to Connect Wallet on iPad
QR code useless for Connect Wallet on Apple iPad if you have no external camera or it's broken or focus bug. And no other version like «Mobile» or «Desktop» of the site as GetGems Telegram Support staff recommended.
Purchase by two users at the same time
Bug Type
UI
Reproduction steps
Two users are trying to buy a freshly posted offer at the same time. Both users make the transaction, but NFT will go to the one whose transaction comes first.
However, at the same time, each user will be displayed information that he successfully bought NFT.
Moreover, users can mislead each other simply by adding #TAG to the NFT address. They all work regardless of context.
For example, click: https://getgems.io/collection/EQAo92DYMokxghKcq-CkCGSk_MgXY5Fo1SPW20gkvZl75iCN/EQD-lDclcJISOedruDpbBNozmQuXtWx2_aIGrxouZk7gXD_U#buy_success
Actual result
Both users get "Great! You have successfully purchased an NFT!" but only one became an actual NFT owner.
Expected result
It is necessary to compare the address of the account owner with the address that bought the NFT and notify the user of the failure.
Suggested Severity
Medium
Device
- any
Additional Context
No response
When creating NFT, the system allows to enter to Display Name more than 60 characters
Bug Type
Functional
Reproduction steps
Preconditions:
- Go to https://getgems.io/
- Connect the wallet
- Go to Create Single NFT page
Steps:
- Enter 61 symbols to Display name input
Actual result
The system allows to enter 61 characters
Expected result
The system doesn't allow to enter more than 60 characters
Suggested Severity
Low
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)
Additional Context
Infinity loader when try to upload .gif in modal creating nft collection
Bug Type
Functional
Reproduction steps
- Click on "Create" in header
- Choose "Collection"
- Try to upload gif as cover
Actual result
Infinity loader without error, button don't react on click
Expected result
As I write on #4
Don't allow pick up .gif files on accept attribute
Suggested Severity
High
Device
OS: macOS
Browser chrome
Version 105
Additional Context
No response
The large space after footer
Bug Type
UI
Reproduction steps
- Go to https://getgems.io/
- Click to "end" on the keyboard
Actual result
There is a large space after footer block.
Expected result
No large space after footer block.
Suggested Severity
Low
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit) 1366 x 768
Additional Context
Testnet.GetGems_не подгружаются новые коллекции и NFT
Bug Type
Functional
Reproduction steps
- Размещаем коллекцию и NFT
- выставляем NFT на аукцион и продажу
- заходим на главную страницу и смотрим - не отображаются NFT в коллекциях, NFT и аукционах
Actual result
Аукционы - ни одного не выдает
Коллекции - выдает 2 TON Diamonds & Test mass minting
Explorer - CATS & Кошмарики
Expected result
Отображаться должно все что загрузили пользователи, теряется качество тестирования
Suggested Severity
High
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
Ability to add more characters than the limit to NFT Name/Profile Description
Bug Type
Functional
Reproduction steps
Go to https://getgems.io/ (or https://testnet.getgems.io/)
Login with any wallet
Click "Create NFT" and select "Single NFT", or "NFT in collection"
Fill in all the fields
Open Burp or any other program that allows you to edit requests before submitting
Connect to a proxy, or open Burp Browser
Click on the "Intercept is off" button in Burp
Click on the "Create NFT" button and confirm minting
In Burp, press Forward until you see the request "POST /graphql"
Change the value of the name (or description) parameter to a value with more characters than the limit
Disable Intercept and mint NFT as usual
Actual result
NFT minting with a name whose number of characters is more than the limit
Expected result
Getgems should show an error as it is not possible to create an NFT with more than the character limit in the name
Suggested Severity
Low
Device
Desktop (please complete the following information):
OS: [e.g. iOS]: Windows 11 25151.1010
Browser [e.g. chrome, safari]: Burp Browser (based on Chromium 105)
Version [e.g. 22]: 105.0.5195.102
Additional Context
You can do the same with your profile description
NFT Example: https://testnet.getgems.io/nft/EQCG-OSV6d1ExoxaQ7Tuc3v8HbVNRKLGK9hTlsprQvsG4Fjt
Tooltip not appearing next to post 'Plus a network fee of 1 TON' (mob)
Bug Type
Functional
Reproduction steps
- Open page https://getgems.io/
- Click on any collection from 'Top collection' section
- Click on any NFT
- Click on tooltip next to post 'Plus a network fee of 1 TON'
Actual result
Tooltip not appearing next to post 'Plus a network fee of 1 TON' when click on icon ' i '
ton8.MP4
Expected result
Tooltip with text appears 'We use this amount to pay link(https://telegra.ph/CHto-takoe-komissiya-seti-service-fee-06-29) and return the unused part to you
.'
Suggested Severity
Medium
Device
Smartphone
- Device: [Iphone 8/ Xiaomi Redmi Note 9 Pro]
- OS: [iOS 15.5 / Android 10]
- Browser [safari, chrome]
- Version [15.5 / 105.0.5195.136]
Additional Context
On desktop, the tooltip appears when click on info icon.
Извините...Произошла ошибка, попробуйте перезагрузить страницу
Bug Type
UX
Reproduction steps
Actual result
An error occurred after navigating the page
Expected result
No error occurs
Suggested Severity
Low
Device
Smartphone (please complete the following information):
- Device: Samsung A71
- OS: Android 12
- Browser: Google Chrome Mobile
Additional Context
No response
In all image inputs allow pick .gif file to upload
Bug Type
Functional
Reproduction steps
- Click on any file input for image (Cover or avatar)
- Try to upload gif
Actual result
Error from backend, but on front-end you allow to pick gif to upload, because accept="image/*"
Expected result
You can't choose gif to upload, only static images which allowed on backend
Remove accept="image/*" and allow only static image formates
Suggested Severity
Medium
Device
OS: macOS
Browser chrome
Version 105
Additional Context
No response
When creating nft, the system loads a large image
Bug Type
Functional
Reproduction steps
Preconditions:
- Go to https://getgems.io/
- Connect the wallet
Steps: - Click to Create button
- Click to Single NFT button
- Upload a large image
Actual result
The system uploads a large image
Expected result
The system can't upload a large image and warns the user
Suggested Severity
Medium
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)
Additional Context
05.When.creating.nft.the.system.uploads.large.files.mp4
infinite loader when trying to buy nft with zero balance
Bug Type
Functional
Reproduction steps
- go https://getgems.io and log in with your wallet (balance must be 0)
- go find any NFT to buy
- on the NFT page, click the Place a bet button
- in the pop-up that appears, click the button with placing a bet without changing the value
- skip step 1 and immediately click the confirm payment button in step 2
Actual result
infinite loader on the payment confirmation button
the network has a large number of requests to the graphql api to verify payment, all with a successful response
and no error appeared
check screen
Expected result
the user should receive a message or response after verifying the payment, indicating whether it was successful or not (an example of a similar message occurs when trying to buy nft without actually paying)
Suggested Severity
Medium
Device
Desktop (please complete the following information):
- OS: linux
- Browser chrome
- Version 105.0.5195.102
Additional Context
No response
Cuts off "Отображаемое имя" in a ratio of 50/60
Bug Type
UX
Reproduction steps
vokoscreenNG-2022-09-18_17-37-41.webm
Actual result
Only 50 characters out of 60 are saved
Expected result
Only 60 characters out of 60 are saved
Suggested Severity
Low
Device
Desktop (please complete the following information):
- OS: Ubuntu 22
- Browser Google Chrome
- Version 105.0.5195.52
Additional Context
No response
Testnet.GetGems_ошибка при создании одиночной NFT
Bug Type
Functional
Reproduction steps
- кнопка создать NFT
- выбираем "Одиночная"
- получаем страницу с ошибкой
Actual result
Возникает страница с ошибкой при попытке создания одиночной NFT
Expected result
Загрузка страницы для создания одиночных NFT
Suggested Severity
High
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
2022-09-24.19.50.06.mp4
GetGems_ошибка при загрузке метаданных NFT
Bug Type
Functional
Reproduction steps
- заходим в интересующий профиль
- смотрим NFT пользователя, а там белые окошки с указанием на принудительное обновление метаданных "Refresh Metadata"
- нажимаем на принудительное обновление данных "Refresh Metadata"
- получаем сообщение "Couldn't Refresh"
- повторное обновление не помогает
Actual result
Отсутствуют данные по NFT
Expected result
Метаданные должны подгружаться автоматически или принудительно
Suggested Severity
Critical
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
Sale history chart do not include current date
Bug Type
Functional
Reproduction steps
- Open any collection
- Open "History" tab
Actual result
Sale history chart do not include current date
Expected result
Sale history chart should include current date
Suggested Severity
Low
Device
Desktop:
OS: macOS 12.3 (21E230)
Browser Chrome
Version 105.0.5195.125
Additional Context
No response
When uploading large user avatar the system uploads it
Bug Type
Functional
Reproduction steps
- Go to https://getgems.io/
- Connect TON wallet
- Go to user profile page
- Upload user avatar
Actual result
The system uploads large photo
Expected result
The system can't upload a large photo and warns the user
Suggested Severity
Low
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)
Additional Context
02.The.system.uploads.a.large.photo.mp4
When creating NFT, the system allows to enter more than 700 characters in the Description input.
Bug Type
Functional
Reproduction steps
Preconditions:
- Go to https://getgems.io/
- Connect the wallet
- Go to Create Single NFT page
Steps:
- Enter 701 characters in Description input
Actual result
The system allows to enter 701 characters
Expected result
The system doesn't allow to enter more than 700 characters
Suggested Severity
Low
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)
Additional Context
[getgems Language] No possibility to change the language on the page getgems.io
Bug Type
Functional
Reproduction steps
- Open the getgems.io page.
- Scroll down the page.
- Сhange the language.
Actual result
In the footer, there is no option to change the language.
The problem only appears in the Safari browser.
Expected result
In the footer, there are options to change the language.
Suggested Severity
High
Device
Desktop (please complete the following information):
- OS: [MAC. iOS ]
- Browser [Safari]
- Version [15.3]
Additional Context
MAC - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FSzN2brDsuA.png
Yandex footer- https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnVuFnDvfSN.png
Mozilla footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FiN3O9z0FkD.png
Google footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FYNpBzsQg8A.png
The text when you type in the search bar is located on the reset button
Bug Type
UI
Reproduction steps
vokoscreenNG-2022-09-19_21-49-29.webm
Actual result
The text when you type runs into a cross
Expected result
The input text should not cover the icon
Suggested Severity
Low
Device
Desktop (please complete the following information):
- OS: Ubuntu 22
- Browser Google Chrome
- Version 105.0.5195.52
Additional Context
No response
Incorrect floor information in filters
Bug Type
Functional
Reproduction steps
Often the attribute filter block in collections displays incorrect floor information, especially when the collections are updated. It doesn't have to be that way. The data should be consistent in different parts of the site.
Actual result
Expected result
Suggested Severity
Low
Device
Desktop (please complete the following information):
- any
Additional Context
No response
GetGems_Проблемы с адаптивной версткой для IPhone
Bug Type
UX
Reproduction steps
- выбираем "Топ коллекций"
- выбираем "Посмотреть все"
- При вертикальном развороте отсутствует прокрутка по параметрам коллекций: Коллекция, Объем, Цена флора, Владельцы, Количество
Actual result
Видим только параметр Коллекция и Объем
Expected result
Должна быть доступна прокрутка вправо
Suggested Severity
Medium
Device
Smartphone (please complete the following information):
Device: iPhone Xs
OS: iOS 15.2.1
Browser Safari
Additional Context
test_capture_video.mov
Incorrect commission
Bug Type
Functional
Reproduction steps
- Open https://getgems.io
- Connect wallet
- Create single NFT
- Scan the QR code via Tonkeeper
- We see the price for creating 0.02 Ton
- Confirm create
- Removed 0.13 Ton
Actual result
Removed 0.13 Ton
Expected result
Removed 0.02 Ton
Suggested Severity
Critical
Device
Desktop (please complete the following information):
- OS: [e.g. iOS]
- Browser [e.g. chrome, safari]
- Version [e.g. 22]
Smartphone (please complete the following information):
- Device: [e.g. iPhone13 Pro Max]
- OS: [e.g. iOS15.3.1]
- Browser [e.g. stock browser, safari]
- Version [e.g. 22]
Additional Context
No response
XSS in social links block in NFT Collection & Profile
Bug Type
Functional
Reproduction steps
via #5
- Go to profile OR to create NFT Collection
- Place breakpoints to request (edit profile / create nft collection)
- Replace URL param to payload, as example
{type: "Website", url: "javascript:alert(document.cookie)"} - Send request
- Go to profile OR created NFT collection
- Click on link with payload from socialLinks component
Actual result
XSS
2022-09-17.07.52.30.mp4
Expected result
Don't allow "clear" links, add 'https' to start
Suggested Severity
Vulnerability
Device
OS: macOS
Browser chrome
Version 105
Additional Context
No response
Loading the NFT Creation Page
Bug Type
UI/UX
Reproduction steps
vokoscreenNG-2022-09-18_21-52-58.webm
Actual result
There is no connection to the wallet.
Expected result
There is a connection with the wallet. The duck layer is superfluous.
Suggested Severity
Critical
Device
Desktop (please complete the following information):
- OS: Ubuntu 22
- Browser Google Chrome
- Version 105.0.5195.52
Additional Context
No response
Wrong ownership of .ton domain names
Bug Type
Functional
Reproduction steps
- Visit https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz/EQC1710IZ1g26bPd1TpQeVab_3AY0FDbScwFhL4LhkhqspEy
- Check the displayed owner address
Actual result
EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz
(This is actually the address of .ton DNS contract.)
Expected result
EQA0LwT4ET7ONNGeQ3gmkpGlLBe-Xq_dkrbwj3KdAdGLNKpZ
(See https://dns.ton.org/#gateway)
Suggested Severity
High
Device
Desktop (please complete the following information):
- OS: any
- Browser: any
- Version: any
Additional Context
Visit https://getgems.io/user/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz
and you'll see a large number of .ton domains purportedly owned by EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz while in fact, they belong to other owners.
This is a severe bug because it prevents the real owners of .ton domains from listing assets on getgems.
Allowed add any link in profile
Bug Type
Security
Reproduction steps
- Go to profile
- Click "Edit information"
- In the link's block add link from iplogger.org
Actual result
No error from api. Backend allow add any links to profile
With link from iplogger (as example) we can get information about users who click on this link in our profile (like IP, Provider, geolocation, header info, info about os and device)
Expected result
White or blacklist links, don't allow users add any links. Or add gateway, when you click on link, to filter bad links on service.
Suggested Severity
Critical
Device
OS: macOS
Browser chrome
Version 105
Additional Context
As example profile with link - https://getgems.io/user/EQAyydOEBX_MQd-xyrDg9Aoxan7uS5eVS75XXxSoU6sAaH7B
GetGems_Отсутствует фильтр по каталогу коллекций
Bug Type
UX
Reproduction steps
- На домашней странице спускаемся до "Топ коллекций"
- Выбираем "Посмотреть все"
- Переходим в реестр коллекций для которых есть аналитика по параметрам: Коллекция, Объем, Цена флора, Владельцы, Количество
- отсутствует фильтр по данным параметрам
Actual result
Нет возможности отфильтровать по параметрам коллекций
Expected result
Должна быть возможность отфильтровать по параметрам коллекций
Suggested Severity
Low
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Smartphone (please complete the following information):
- Device: iPhone Xs
- OS: iOS 15.2.1
- Browser Safari
Additional Context
The FAQ link on the main page doesn't work
Bug Type
Functional
Reproduction steps
- Go to https://getgems.io/
- Click on FAQ link
Actual result
The FAQ page doesn't work
Expected result
The FAQ page opens
Suggested Severity
Medium
Device
OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)
Additional Context
01.FAQ.link.doesn.t.work.mp4
The Way to back for user's page
Bug Type
Performance
Reproduction steps
- Click on main page of user;
- Choose a NFT and click on it.
Actual result
Expected result
- Click on main page of user;
- Choose a NFT and click on it;
- Back to user's page via «way».
Suggested Severity
Low
Device
Desktop (please complete the following information):
- OS: macOS 12.5.1
- Browser DuckDuckGo
Additional Context
When user wants getting back using step-backs — he/she can't do this. Only make 2 actions using avatar on right upper corner.
GetGems_Не создается NFT
Bug Type
Functional
Reproduction steps
- войти в тестовую среду
- пройти по шагам создания NFT коллекции или Одиночного NFT
- оплатить комиссию за создание NFT коллекции или Одиночного NFT
- колесико крутится, но ничего не происходит
Actual result
Коллекция или одиночный NFT не создаются
Expected result
Создание коллекции NFT или одиночного NFT
Suggested Severity
Critical
Device
OS: iOS 12.6
Browser Google
Version 105.0.5195.125
Additional Context
https://user-images.githubusercontent.com/113825222/191865985-035a709d-b20b-492a-9276-e1e8c3631d38.mp4
Dog crossbreeding mistake
Bug Type
Functional
Reproduction steps
- Get a link for crossbreeding
- Select a dog for crossbreeding
- Press the crossing button
- Get the error
Actual result
The error text: "Response not successfull: Received status code 500"
Expected result
Crossbreeding is carried out successfully
Suggested Severity
High
Device
Smartphone (please complete the following information):
- Device: OnePlus 11
- OS: Android 14
- Browser: Google chrome browser
- Version 125.0.6422.165
Additional Context
Incorrect full-text search in "TON DNS Domains" section
Bug Type
Functional
Reproduction steps
- Let's open the main "TON DNS Domains" page (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz).
- Let's try to find "monkeysworld.ton" domain by texting "world" in the search box (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz?filter=%7B%22q%22%3A%22world%22%7D):
Actual result
"monkeysworld.ton" domain does not appear in search results, although the domain exists (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz/EQBW2Gx7fXF43IsMBNS6dp2ijxoXRG-ESiy9sk5ztrll00xw):
Expected result
Full-text search should be performed.
Suggested Severity
High
Device
Desktop:
- OS: Windows 10 Pro 64-bit
- Browser: Google Chrome
- Version: 105.0.5195.127 32-bit
Additional Context
No response
No checks on backend for count socialLinks
Bug Type
Functional
Reproduction steps
- Go to profile
- Edit any information
- Repeat request and add any count of links
Actual result
Unlimited links in profile
Expected result
Links in profile limited
Suggested Severity
Critical
Device
OS: macOS
Browser chrome
Version 105
Additional Context
No response
The search query is saved after leaving the page
Bug Type
Functional
Reproduction steps
- Open https://getgems.io/
- Scroll down to the 'Top collections'
- Click on any collection from the list
- Add some filters and some valid request (eg. ID) to the search filed
- Click on logo at the upper left corner
- Scroll down to the 'Top collections'
- Click on same collection (from step 3)
- Pay attention on the screen
Actual result
The search query is saved after leaving the page and return back
ton7.mp4
Expected result
Search terms reset after leaving the page
Suggested Severity
Low
Device
Device
Desktop (please complete the following information):
OS: [Windows]
Browser [chrome]
Version [105.0.5195.127]
Additional Context
No response
Stored XSS in api.getgems.io
Bug Type
Functional
Reproduction steps
- Go to create NFT
- Fill fields and click "Create"
- Repeat request to /graphql with
> "operationName": "simpleTemporaryStorageSet"
Change any param in body to XSS payload
For example
newOwnerAddress: "<script>window.location = 'https://www.youtube.com/watch?v=dQw4w9WgXcQ'</script>
Go to url with key in response
https://api.getgems.io/storage/simple?key=kek
Actual result
XSS in page, you can update key lifetime with repeat request every 5 minutes
2022-09-19.22.03.04.mp4
Expected result
XSS escaping on page
Suggested Severity
Vulnerability
Device
OS: macOS
Browser: Firefox
Version: 104.0.2
Additional Context
No response
Uploading GIF as NFT or Profile Avatar/Banner
Bug Type
Functional
Reproduction steps
- Go to https://getgems.io/ (or https://testnet.getgems.io/)
- Login with any wallet
- Click "Create NFT" and select "Single NFT", or "NFT in collection"
- Fill in all the fields
- Open Burp or any other program that allows you to edit requests before submitting
- Connect to a proxy, or open Burp Browser
- Click on the "Intercept is off" button in Burp
- Click on the image upload button and select your GIF file
- In Burp, press Forward until you see the request "POST /upload-media"
- In the "Content-Disposition" header "filename" parameter change filename.gif to filename.png
- Disable Intercept and mint NFT as usual
Actual result
NFT minted with animated picture
Expected result
Getgems should show an error as it is currently not possible to upload a .GIF file as an NFT image
Suggested Severity
Medium
Device
Desktop (please complete the following information):
- OS: [e.g. iOS]: Windows 11 25151.1010
- Browser [e.g. chrome, safari]: Burp Browser (based on Chromium 105)
- Version [e.g. 22]: 105.0.5195.102
Additional Context
You can do the same with your avatar or profile banner.
NFT example: https://testnet.getgems.io/nft/EQDs5TsGeC1yriIbeYv3YKaTsEoyUiemH8Y1MD1ejBgrwak9
Profile Example: https://getgems.io/user/EQA5n5KM7E_9YwRPpjwkawPgCwSmR3vxb0FzovG18hhpiE5G
[Getgems wallet] The download icon is displayed after clicking on the link Ton Wallet in the window connect the wallet.
Bug Type
Functional
Reproduction steps
- Open the page https://getgems.io
- Click the connect button.
- Click the Ton Wallet button.
Actual result
The download icon is displayed, but nothing happens.
Expected result
The connection to the Ton Wallet is displayed.
Suggested Severity
High
Device
Desktop (please complete the following information):
- OS: Windows 10 Pro
- Browser [Chrome]
- Version [105.0.5195.127]
Additional Context
The user can buy NFT using the chrome wallet extension, but can't buy NFT using the desktop app.
Bug Type
Functional
Reproduction steps
- Go to GetGems
- Choose any NFT
- Click buy
- Click 'TON Wallet' tab
- Click buy
Actual result
Get invitation to install tonkeeper or tonhub instead of redirect to the desktop app.
Expected result
Redirect to the desktop application. Something like this:
Suggested Severity
Medium
Device
Desktop (please complete the following information):
- OS: windows
- Browser chrome
- Version 105
Additional Context
No response
GetGems_NFT не возвращаются после окончания аукциона
Bug Type
Functional
Reproduction steps
- размещаем на аукционе NFT
- аукцион заканчивается, но NFT остается в аукционном списке
- для вывода с аукциона требуется дополнительная авторизация через кошелек
Actual result
NFT остается в статусе аукционной и требует дополнительной авторизации через кошелек
Expected result
NFT не должна быть представлена в перечне NFT, которые доступны через аукцион
С пользователем при публикации на аукционе NFT желательно предложить автоматический возврат с аукциона или, как вариант, возврат при низких комиссиях по операциям
Suggested Severity
Medium
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
2022-09-24.20.20.15.mp4
GetGems_Application Error
Bug Type
UX
Reproduction steps
- Авторизуемся через TONKeeper
- Заходим в профиль пользователя
- Начинаем отмечать "нравится" NFT пользователя
- В случайный момент возникает ошибка (повторить не удалось)
Actual result
При проставлении отметок "нравится" NFT ПО выдало ошибку в соответствии с скрином
Expected result
Работа без ошибок
Suggested Severity
Low
Device
Устройство: iPhone XS
ОС: iOS15.2.1
Браузер APP TONKeeper
версии 2.6
Additional Context
No response
[Getgems] The getgems page is displayed in Russian.
Bug Type
UI
Reproduction steps
- Open the page https://getgems.io
- Scroll page down.
Actual result
When you go to the page, the default language is English, but the page appears in Russian.
Expected result
When the default page language is English, the page appears in English.
Suggested Severity
Low
Device
Desktop (please complete the following information):
- OS: Windows 10 Pro
- Browser [e.g. chrome, mozilla, yandex]
- Version [Chrome 105.0.5195.127, Mozilla - 104.0.2, Yandex - 22.9.1.1095 ]
Additional Context
Google - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnPweqij2jG.png
Google footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FYNpBzsQg8A.png
Mozilla - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2F6cng8DfND4.png4
Mozilla footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FiN3O9z0FkD.png
Yandex - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FPO1NoDayiw.png
Yandex footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnVuFnDvfSN.png
GetGems_пользовательские баги
Bug Type
UX
Reproduction steps
Баг 1 не сворачивается меню "Создать"
- войдите в профиль
- Нажмите на кнопку "Создать"
- можно выбирать и "Одиночный NFT" и "NFT в коллекции", но меню не закрывается
Баг 2 не подгружаются метаданные (принудительная загрузка)
- заходим в интересующий профиль
- смотрим NFT пользователя, а там белые окошки с указанием на принудительное обновление метаданных
Баг 3 долго рассчитывается раритетность
- загружаем новую NFT в коллекцию
- заходим в NFT смотрим на раритетность, а она еще не посчитана ) видим сообщение "Updating Data"
Actual result
Баг 1
При выборе варианта создания NFT меню не сворачивается
Баг 2
Не подгружаются метаданные NFT при просмотре пользовательской коллекции
Баг 3
После выгрузки NFT не обновлены данные по рарности
Expected result
Баг 1
При выборе варианта создания NFT меню должно свернуться
Баг 2
Подгружаются метаданные NFT при просмотре пользовательской коллекции
Баг 3
Обновлять данные по рарности NFT после загрузки новой NFT в коллекции
Suggested Severity
Low
Device
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
GetGems_ошибка при выставлении на продажу NFT
Bug Type
Functional
Reproduction steps
- Выставляем NFT из коллекции на продажу по фиксированной цене
- Оформляем договор, акцептуем платежи через TONWallet
- После обновления страницы на GetGems появляется ошибка
Actual result
Ошибка после подписания контракта на продажу и обновления страницы в GetGems
Expected result
Переход на страницу с NFT без ошибки
Suggested Severity
High
Device
Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102
Additional Context
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.