Git Product home page Git Product logo

issues's People

Contributors

akostylev0 avatar hiyorimi avatar lana-getgems avatar vanyaronin avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

issues's Issues

Testnet getgems not sync created collection and NFT

Bug Type

Functional

Reproduction steps

  1. create collection with ton-x and Sandbox wallet.
  2. Mint NFT with ton-x and Sandbox wallet.
  3. Check the transaction on TonApi and the txs succeed. (https://testnet.tonapi.io/transaction/14f7cb18c6571c38e78738e612cbea650a9010f7b50388e4c3166a1b4d44293b)
  4. Check the testnet.getgems.io and the collection and NFT not exists.(https://testnet.getgems.io/collection/kQCouclf8YfgO3R_2cXlOtMdx4HIEWBZhVhNR_Ki15fW53L8)

Actual result

Collection creation and NFT mint txs succeed, check the testnet.getgems.io and the collection and NFT not exists.

Expected result

The collection and NFT will display on testnet.getgems.

Suggested Severity

High

Device

Desktop (please complete the following information):

  • OS: [ iOS]
  • Browser [chrome]

Additional Context

I tried collection creation and NFT mint with ton-x before and after some time, it shows on testnet.getgems (https://testnet.getgems.io/collection/UQC27NxV69phhaMim7c8tWai0KO0KlZr_r8yL6x18TB4xOZK).
But i try again they didn't show on testnet.getgems. which is wired. Please help with ASAP. Thanks.

GetGems_Уточнение информации на сайте

Bug Type

UX

Reproduction steps

  1. заходим на страницу FAQ https://telegra.ph/Getgemsio-FAQ-rus-04-27
  2. п. 32 про нулевые адреса
  3. п. 19 про аукционы
  4. п. 15 информация по созданию кошельков

Actual result

п. 2
выдает 2 адреса
EQD__________________________________________0vo

EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9c

п. 3
Написано, что аукционы не реализованы

п. 4
Даны отсылки к мобильным устройствам

Expected result

п. 2
есть еще 1 нулевой адрес
EQCFgZBg6CjMMNbH24pXvLN_1mVStlnu6UT3iBwzf0M--QzC
DNS имя данного адреса
CryptoBlackHole.ton

п. 3
Аукционы появились, нужно обновить информацию

п. 4
Добавить возможность открытия кошельков с ПК

Suggested Severity

Low

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.125

Additional Context

п. 2
Снимок экрана 2022-09-23 в 02 22 17

п. 3
Снимок экрана 2022-09-23 в 02 36 10

п. 4
Снимок экрана 2022-09-23 в 02 46 54

Extend error message for NFTs that can be transferend only from specified marketplace

Bug Type

UI

Reproduction steps

For reproduce this issue you need to get NFT, what can be transfer only from the specified marketplace.

For example, this NFT have specified marketplace in metadata from there it can be sent:
EQDe-Xg6ZvC5737oNu3mcuEslRtgF5o7LDulaeYu78LKUnF_

  1. Select NFT to Transfer
  2. Transfer NFT and sing transaction with Tonkeeper
  3. Wait until transaction fails

Actual result

GetGems shows error in transaction and suggest to repeat it after 10 mins or contact support.

Expected result

GetGems shows message, that this NFT can be transfer only from specified marketplace.

Suggested Severity

Medium

Device

Desktop (please complete the following information):

  • OS: macOS High Sierra 10.13.6
  • Browser: Chrome
  • Version: 105.0.5195.102

Smartphone (please complete the following information):

  • Device: iPhone XR
  • OS: 16.0
  • Browser: Safari
  • Version: 16

Additional Context

This issue have connections to this issue: tonkeeper/wallet#15

Previously removed NFT by Getgems moderators, still displays in collected NFTs

Bug Type

UI

Reproduction steps

  1. Open My NFTs in Getgems web-bot
  2. Open original NFT
  3. Go back
  4. Open previously removed NFT (by Getgems moderators)
  5. Make sure that time passes and there is no information with collection attributes
2022-09-19.01-55-02.mp4

Actual result

We see picture of previously removed NFT (previously reported by users like fake collection) in list. We see only loading status and no any information with atributes.

Expected result

Deleted NFT should not displayed, because it already was deleted by Getgems moderators in 29th of June. Deleted link on fake NFT: https://getgems.io/collection/EQDG27UruxsvO28c4kqZsOIFM-xBr_EsFcvBdKuE0lh49viR

Suggested Severity

Medium

Device

OS: Windows 10
Browser: Chrome
Version 105.0.5195.127 (Official Build) (64-bit)

Additional Context

Over time, the number of NFTs deleted by moderators may grow and users will be uncomfortable seeing them in their wallets. The scenario of confusion when sending NFTs to other wallets is not excluded.

No way to Connect Wallet on iPad

QR code useless for Connect Wallet on Apple iPad if you have no external camera or it's broken or focus bug. And no other version like «Mobile» or «Desktop» of the site as GetGems Telegram Support staff recommended.

Purchase by two users at the same time

Bug Type

UI

Reproduction steps

Two users are trying to buy a freshly posted offer at the same time. Both users make the transaction, but NFT will go to the one whose transaction comes first.
However, at the same time, each user will be displayed information that he successfully bought NFT.

Moreover, users can mislead each other simply by adding #TAG to the NFT address. They all work regardless of context.

For example, click: https://getgems.io/collection/EQAo92DYMokxghKcq-CkCGSk_MgXY5Fo1SPW20gkvZl75iCN/EQD-lDclcJISOedruDpbBNozmQuXtWx2_aIGrxouZk7gXD_U#buy_success

Actual result

Both users get "Great! You have successfully purchased an NFT!" but only one became an actual NFT owner.

image

Expected result

It is necessary to compare the address of the account owner with the address that bought the NFT and notify the user of the failure.
image

Suggested Severity

Medium

Device

  • any

Additional Context

No response

Infinity loader when try to upload .gif in modal creating nft collection

Bug Type

Functional

Reproduction steps

  1. Click on "Create" in header
  2. Choose "Collection"
  3. Try to upload gif as cover

Actual result

Infinity loader without error, button don't react on click

Expected result

As I write on #4
Don't allow pick up .gif files on accept attribute

Suggested Severity

High

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

The large space after footer

Bug Type

UI

Reproduction steps

  1. Go to https://getgems.io/
  2. Click to "end" on the keyboard

Actual result

There is a large space after footer block.

Expected result

No large space after footer block.

Suggested Severity

Low

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit) 1366 x 768

Additional Context

Reproduced only in Google Chrome.
03  The large space after footer

Testnet.GetGems_не подгружаются новые коллекции и NFT

Bug Type

Functional

Reproduction steps

  1. Размещаем коллекцию и NFT
  2. выставляем NFT на аукцион и продажу
  3. заходим на главную страницу и смотрим - не отображаются NFT в коллекциях, NFT и аукционах

Actual result

Аукционы - ни одного не выдает
Коллекции - выдает 2 TON Diamonds & Test mass minting
Explorer - CATS & Кошмарики

Expected result

Отображаться должно все что загрузили пользователи, теряется качество тестирования

Suggested Severity

High

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

Снимок экрана 2022-09-24 в 19 15 24

Снимок экрана 2022-09-24 в 19 32 43

Ability to add more characters than the limit to NFT Name/Profile Description

Bug Type

Functional

Reproduction steps

Go to https://getgems.io/ (or https://testnet.getgems.io/)
Login with any wallet
Click "Create NFT" and select "Single NFT", or "NFT in collection"
Fill in all the fields
Open Burp or any other program that allows you to edit requests before submitting
Connect to a proxy, or open Burp Browser
Click on the "Intercept is off" button in Burp
Click on the "Create NFT" button and confirm minting
In Burp, press Forward until you see the request "POST /graphql"
Change the value of the name (or description) parameter to a value with more characters than the limit
Disable Intercept and mint NFT as usual

Actual result

NFT minting with a name whose number of characters is more than the limit

Expected result

Getgems should show an error as it is not possible to create an NFT with more than the character limit in the name

Suggested Severity

Low

Device

Desktop (please complete the following information):

OS: [e.g. iOS]: Windows 11 25151.1010
Browser [e.g. chrome, safari]: Burp Browser (based on Chromium 105)
Version [e.g. 22]: 105.0.5195.102

Additional Context

You can do the same with your profile description
NFT Example: https://testnet.getgems.io/nft/EQCG-OSV6d1ExoxaQ7Tuc3v8HbVNRKLGK9hTlsprQvsG4Fjt

Tooltip not appearing next to post 'Plus a network fee of 1 TON' (mob)

Bug Type

Functional

Reproduction steps

  1. Open page https://getgems.io/
  2. Click on any collection from 'Top collection' section
  3. Click on any NFT
  4. Click on tooltip next to post 'Plus a network fee of 1 TON'

Actual result

Tooltip not appearing next to post 'Plus a network fee of 1 TON' when click on icon ' i '

ton8.MP4

Expected result

Tooltip with text appears 'We use this amount to pay link(https://telegra.ph/CHto-takoe-komissiya-seti-service-fee-06-29) and return the unused part to you
ton8
.'

Suggested Severity

Medium

Device

Smartphone

  • Device: [Iphone 8/ Xiaomi Redmi Note 9 Pro]
  • OS: [iOS 15.5 / Android 10]
  • Browser [safari, chrome]
  • Version [15.5 / 105.0.5195.136]

Additional Context

On desktop, the tooltip appears when click on info icon.

In all image inputs allow pick .gif file to upload

Bug Type

Functional

Reproduction steps

  1. Click on any file input for image (Cover or avatar)
  2. Try to upload gif

Actual result

Error from backend, but on front-end you allow to pick gif to upload, because accept="image/*"

Expected result

You can't choose gif to upload, only static images which allowed on backend
Remove accept="image/*" and allow only static image formates

Suggested Severity

Medium

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

When creating nft, the system loads a large image

Bug Type

Functional

Reproduction steps

Preconditions:

  1. Go to https://getgems.io/
  2. Connect the wallet
    Steps:
  3. Click to Create button
  4. Click to Single NFT button
  5. Upload a large image

Actual result

The system uploads a large image

Expected result

The system can't upload a large image and warns the user

Suggested Severity

Medium

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)

Additional Context

05.When.creating.nft.the.system.uploads.large.files.mp4

infinite loader when trying to buy nft with zero balance

Bug Type

Functional

Reproduction steps

  1. go https://getgems.io and log in with your wallet (balance must be 0)
  2. go find any NFT to buy
  3. on the NFT page, click the Place a bet button
  4. in the pop-up that appears, click the button with placing a bet without changing the value
  5. skip step 1 and immediately click the confirm payment button in step 2

Actual result

infinite loader on the payment confirmation button
the network has a large number of requests to the graphql api to verify payment, all with a successful response
and no error appeared
check screen
image

Expected result

the user should receive a message or response after verifying the payment, indicating whether it was successful or not (an example of a similar message occurs when trying to buy nft without actually paying)

Suggested Severity

Medium

Device

Desktop (please complete the following information):

  • OS: linux
  • Browser chrome
  • Version 105.0.5195.102

Additional Context

No response

Cuts off "Отображаемое имя" in a ratio of 50/60

Bug Type

UX

Reproduction steps

vokoscreenNG-2022-09-18_17-37-41.webm

Actual result

Only 50 characters out of 60 are saved

Expected result

Only 60 characters out of 60 are saved

Suggested Severity

Low

Device

Desktop (please complete the following information):

  • OS: Ubuntu 22
  • Browser Google Chrome
  • Version 105.0.5195.52

Additional Context

No response

Testnet.GetGems_ошибка при создании одиночной NFT

Bug Type

Functional

Reproduction steps

  1. кнопка создать NFT
  2. выбираем "Одиночная"
  3. получаем страницу с ошибкой

Actual result

Возникает страница с ошибкой при попытке создания одиночной NFT

Expected result

Загрузка страницы для создания одиночных NFT

Suggested Severity

High

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

2022-09-24.19.50.06.mp4

GetGems_ошибка при загрузке метаданных NFT

Bug Type

Functional

Reproduction steps

  1. заходим в интересующий профиль
  2. смотрим NFT пользователя, а там белые окошки с указанием на принудительное обновление метаданных "Refresh Metadata"
  3. нажимаем на принудительное обновление данных "Refresh Metadata"
  4. получаем сообщение "Couldn't Refresh"
  5. повторное обновление не помогает

Actual result

Отсутствуют данные по NFT

Expected result

Метаданные должны подгружаться автоматически или принудительно

Suggested Severity

Critical

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

Снимок экрана 2022-09-24 в 17 02 18

Снимок экрана 2022-09-24 в 17 16 00

Снимок экрана 2022-09-24 в 17 16 09

Sale history chart do not include current date

Bug Type

Functional

Reproduction steps

  1. Open any collection
  2. Open "History" tab

Actual result

Sale history chart do not include current date

getgemshistory

Expected result

Sale history chart should include current date

Suggested Severity

Low

Device

Desktop:
OS: macOS 12.3 (21E230)
Browser Chrome
Version 105.0.5195.125

Additional Context

No response

When uploading large user avatar the system uploads it

Bug Type

Functional

Reproduction steps

  1. Go to https://getgems.io/
  2. Connect TON wallet
  3. Go to user profile page
  4. Upload user avatar

Actual result

The system uploads large photo

Expected result

The system can't upload a large photo and warns the user

Suggested Severity

Low

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)

Additional Context

02.The.system.uploads.a.large.photo.mp4

When creating NFT, the system allows to enter more than 700 characters in the Description input.

Bug Type

Functional

Reproduction steps

Preconditions:

  1. Go to https://getgems.io/
  2. Connect the wallet
  3. Go to Create Single NFT page

Steps:

  1. Enter 701 characters in Description input

Actual result

The system allows to enter 701 characters

Expected result

The system doesn't allow to enter more than 700 characters

Suggested Severity

Low

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)

Additional Context

05  The system allows to enter to a description more than 700 symbols

[getgems Language] No possibility to change the language on the page getgems.io

Bug Type

Functional

Reproduction steps

  1. Open the getgems.io page.
  2. Scroll down the page.
  3. Сhange the language.

Actual result

In the footer, there is no option to change the language.
The problem only appears in the Safari browser.

Expected result

In the footer, there are options to change the language.

Suggested Severity

High

Device

Desktop (please complete the following information):

  • OS: [MAC. iOS ]
  • Browser [Safari]
  • Version [15.3]

Additional Context

MAC - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FSzN2brDsuA.png
Yandex footer- https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnVuFnDvfSN.png
Mozilla footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FiN3O9z0FkD.png
Google footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FYNpBzsQg8A.png

The text when you type in the search bar is located on the reset button

Bug Type

UI

Reproduction steps

vokoscreenNG-2022-09-19_21-49-29.webm

Actual result

The text when you type runs into a cross

Expected result

The input text should not cover the icon

Suggested Severity

Low

Device

Desktop (please complete the following information):

  • OS: Ubuntu 22
  • Browser Google Chrome
  • Version 105.0.5195.52

Additional Context

No response

Incorrect floor information in filters

Bug Type

Functional

Reproduction steps

Often the attribute filter block in collections displays incorrect floor information, especially when the collections are updated. It doesn't have to be that way. The data should be consistent in different parts of the site.

Actual result

image

Expected result

image

Suggested Severity

Low

Device

Desktop (please complete the following information):

  • any

Additional Context

No response

GetGems_Проблемы с адаптивной версткой для IPhone

Bug Type

UX

Reproduction steps

  1. выбираем "Топ коллекций"
  2. выбираем "Посмотреть все"
  3. При вертикальном развороте отсутствует прокрутка по параметрам коллекций: Коллекция, Объем, Цена флора, Владельцы, Количество

Actual result

Видим только параметр Коллекция и Объем

Expected result

Должна быть доступна прокрутка вправо

Suggested Severity

Medium

Device

Smartphone (please complete the following information):

Device: iPhone Xs
OS: iOS 15.2.1
Browser Safari

Additional Context

test_capture_video.mov

Incorrect commission

Bug Type

Functional

Reproduction steps

  1. Open https://getgems.io
  2. Connect wallet
  3. Create single NFT
  4. Scan the QR code via Tonkeeper
  5. We see the price for creating 0.02 Ton
  6. Confirm create
  7. Removed 0.13 Ton

Actual result

Removed 0.13 Ton

IMG_9027
IMG_9030

Expected result

Removed 0.02 Ton

Suggested Severity

Critical

Device

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Smartphone (please complete the following information):

  • Device: [e.g. iPhone13 Pro Max]
  • OS: [e.g. iOS15.3.1]
  • Browser [e.g. stock browser, safari]
  • Version [e.g. 22]

Additional Context

No response

XSS in social links block in NFT Collection & Profile

Bug Type

Functional

Reproduction steps

via #5

  1. Go to profile OR to create NFT Collection
  2. Place breakpoints to request (edit profile / create nft collection)
  3. Replace URL param to payload, as example
    {type: "Website", url: "javascript:alert(document.cookie)"}
  4. Send request
  5. Go to profile OR created NFT collection
  6. Click on link with payload from socialLinks component

Actual result

XSS

2022-09-17.07.52.30.mp4

Expected result

Don't allow "clear" links, add 'https' to start

Suggested Severity

Vulnerability

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Loading the NFT Creation Page

Bug Type

UI/UX

Reproduction steps

vokoscreenNG-2022-09-18_21-52-58.webm

Actual result

There is no connection to the wallet.

Expected result

There is a connection with the wallet. The duck layer is superfluous.

Suggested Severity

Critical

Device

Desktop (please complete the following information):

  • OS: Ubuntu 22
  • Browser Google Chrome
  • Version 105.0.5195.52

Additional Context

No response

Wrong ownership of .ton domain names

Bug Type

Functional

Reproduction steps

  1. Visit https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz/EQC1710IZ1g26bPd1TpQeVab_3AY0FDbScwFhL4LhkhqspEy
  2. Check the displayed owner address

Actual result

EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz

(This is actually the address of .ton DNS contract.)

Expected result

EQA0LwT4ET7ONNGeQ3gmkpGlLBe-Xq_dkrbwj3KdAdGLNKpZ

(See https://dns.ton.org/#gateway)

Suggested Severity

High

Device

Desktop (please complete the following information):

  • OS: any
  • Browser: any
  • Version: any

Additional Context

Visit https://getgems.io/user/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz
and you'll see a large number of .ton domains purportedly owned by EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz while in fact, they belong to other owners.

This is a severe bug because it prevents the real owners of .ton domains from listing assets on getgems.

Allowed add any link in profile

Bug Type

Security

Reproduction steps

  1. Go to profile
  2. Click "Edit information"
  3. In the link's block add link from iplogger.org

Actual result

No error from api. Backend allow add any links to profile
With link from iplogger (as example) we can get information about users who click on this link in our profile (like IP, Provider, geolocation, header info, info about os and device)

Expected result

White or blacklist links, don't allow users add any links. Or add gateway, when you click on link, to filter bad links on service.

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

As example profile with link - https://getgems.io/user/EQAyydOEBX_MQd-xyrDg9Aoxan7uS5eVS75XXxSoU6sAaH7B

GetGems_Отсутствует фильтр по каталогу коллекций

Bug Type

UX

Reproduction steps

  1. На домашней странице спускаемся до "Топ коллекций"
  2. Выбираем "Посмотреть все"
  3. Переходим в реестр коллекций для которых есть аналитика по параметрам: Коллекция, Объем, Цена флора, Владельцы, Количество
  4. отсутствует фильтр по данным параметрам

Actual result

Нет возможности отфильтровать по параметрам коллекций

Expected result

Должна быть возможность отфильтровать по параметрам коллекций

Suggested Severity

Low

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Smartphone (please complete the following information):

  • Device: iPhone Xs
  • OS: iOS 15.2.1
  • Browser Safari

Additional Context

IMG_F4F23A93CA7A-1
Снимок экрана 2022-09-24 в 21 56 17

The FAQ link on the main page doesn't work

Bug Type

Functional

Reproduction steps

  1. Go to https://getgems.io/
  2. Click on FAQ link

Actual result

The FAQ page doesn't work

Expected result

The FAQ page opens

Suggested Severity

Medium

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)

Additional Context

01.FAQ.link.doesn.t.work.mp4

The Way to back for user's page

Bug Type

Performance

Reproduction steps

  1. Click on main page of user;
  2. Choose a NFT and click on it.

Screenshot 2022-09-16 at 15 47 56

Actual result

Main view of the NFT
Screenshot 2022-09-16 at 15 51 39

Expected result

  1. Click on main page of user;
  2. Choose a NFT and click on it;
  3. Back to user's page via «way».

Screenshot 2022-09-16 at 15 51 39

Suggested Severity

Low

Device

Desktop (please complete the following information):

  • OS: macOS 12.5.1
  • Browser DuckDuckGo

Additional Context

When user wants getting back using step-backs — he/she can't do this. Only make 2 actions using avatar on right upper corner.

GetGems_Не создается NFT

Bug Type

Functional

Reproduction steps

  1. войти в тестовую среду
  2. пройти по шагам создания NFT коллекции или Одиночного NFT
  3. оплатить комиссию за создание NFT коллекции или Одиночного NFT
  4. колесико крутится, но ничего не происходит

Actual result

Коллекция или одиночный NFT не создаются

Expected result

Создание коллекции NFT или одиночного NFT

Suggested Severity

Critical

Device

OS: iOS 12.6
Browser Google
Version 105.0.5195.125

Additional Context

https://user-images.githubusercontent.com/113825222/191865985-035a709d-b20b-492a-9276-e1e8c3631d38.mp4
Снимок экрана 2022-09-24 в 17 38 44

Dog crossbreeding mistake

Bug Type

Functional

Reproduction steps

  1. Get a link for crossbreeding
  2. Select a dog for crossbreeding
  3. Press the crossing button
  4. Get the error

Actual result

The error text: "Response not successfull: Received status code 500"

Expected result

Crossbreeding is carried out successfully

Suggested Severity

High

Device

Smartphone (please complete the following information):

  • Device: OnePlus 11
  • OS: Android 14
  • Browser: Google chrome browser
  • Version 125.0.6422.165

Additional Context

image

Incorrect full-text search in "TON DNS Domains" section

Bug Type

Functional

Reproduction steps

  1. Let's open the main "TON DNS Domains" page (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz).
  2. Let's try to find "monkeysworld.ton" domain by texting "world" in the search box (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz?filter=%7B%22q%22%3A%22world%22%7D):
    image

Actual result

"monkeysworld.ton" domain does not appear in search results, although the domain exists (https://getgems.io/collection/EQC3dNlesgVD8YbAazcauIrXBPfiVhMMr5YYk2in0Mtsz0Bz/EQBW2Gx7fXF43IsMBNS6dp2ijxoXRG-ESiy9sk5ztrll00xw):
image

Expected result

Full-text search should be performed.

Suggested Severity

High

Device

Desktop:

  • OS: Windows 10 Pro 64-bit
  • Browser: Google Chrome
  • Version: 105.0.5195.127 32-bit

Additional Context

No response

No checks on backend for count socialLinks

Bug Type

Functional

Reproduction steps

  1. Go to profile
  2. Edit any information
  3. Repeat request and add any count of links

Actual result

Unlimited links in profile

Expected result

Links in profile limited

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

The search query is saved after leaving the page

Bug Type

Functional

Reproduction steps

  1. Open https://getgems.io/
  2. Scroll down to the 'Top collections'
  3. Click on any collection from the list
  4. Add some filters and some valid request (eg. ID) to the search filed
  5. Click on logo at the upper left corner
  6. Scroll down to the 'Top collections'
  7. Click on same collection (from step 3)
  8. Pay attention on the screen

Actual result

The search query is saved after leaving the page and return back
ton7

ton7.mp4

Expected result

Search terms reset after leaving the page

Suggested Severity

Low

Device

Device
Desktop (please complete the following information):
OS: [Windows]
Browser [chrome]
Version [105.0.5195.127]

Additional Context

No response

Stored XSS in api.getgems.io

Bug Type

Functional

Reproduction steps

  1. Go to create NFT
  2. Fill fields and click "Create"
  3. Repeat request to /graphql with
    > "operationName": "simpleTemporaryStorageSet"
    Change any param in body to XSS payload
    For example
    newOwnerAddress: "<script>window.location = 'https://www.youtube.com/watch?v=dQw4w9WgXcQ'</script>

Go to url with key in response
https://api.getgems.io/storage/simple?key=kek

Actual result

XSS in page, you can update key lifetime with repeat request every 5 minutes

2022-09-19.22.03.04.mp4

Expected result

XSS escaping on page

Suggested Severity

Vulnerability

Device

OS: macOS
Browser: Firefox
Version: 104.0.2

Additional Context

No response

Uploading GIF as NFT or Profile Avatar/Banner

Bug Type

Functional

Reproduction steps

  1. Go to https://getgems.io/ (or https://testnet.getgems.io/)
  2. Login with any wallet
  3. Click "Create NFT" and select "Single NFT", or "NFT in collection"
  4. Fill in all the fields
  5. Open Burp or any other program that allows you to edit requests before submitting
  6. Connect to a proxy, or open Burp Browser
  7. Click on the "Intercept is off" button in Burp
  8. Click on the image upload button and select your GIF file
  9. In Burp, press Forward until you see the request "POST /upload-media"
  10. In the "Content-Disposition" header "filename" parameter change filename.gif to filename.png
  11. Disable Intercept and mint NFT as usual

Actual result

NFT minted with animated picture

Expected result

Getgems should show an error as it is currently not possible to upload a .GIF file as an NFT image

Suggested Severity

Medium

Device

Desktop (please complete the following information):

  • OS: [e.g. iOS]: Windows 11 25151.1010
  • Browser [e.g. chrome, safari]: Burp Browser (based on Chromium 105)
  • Version [e.g. 22]: 105.0.5195.102

Additional Context

You can do the same with your avatar or profile banner.
NFT example: https://testnet.getgems.io/nft/EQDs5TsGeC1yriIbeYv3YKaTsEoyUiemH8Y1MD1ejBgrwak9
Profile Example: https://getgems.io/user/EQA5n5KM7E_9YwRPpjwkawPgCwSmR3vxb0FzovG18hhpiE5G

[Getgems wallet] The download icon is displayed after clicking on the link Ton Wallet in the window connect the wallet.

Bug Type

Functional

Reproduction steps

  1. Open the page https://getgems.io
  2. Click the connect button.
  3. Click the Ton Wallet button.

Actual result

The download icon is displayed, but nothing happens.

Expected result

The connection to the Ton Wallet is displayed.

Suggested Severity

High

Device

Desktop (please complete the following information):

  • OS: Windows 10 Pro
  • Browser [Chrome]
  • Version [105.0.5195.127]

Additional Context

Google - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FYandex%20devtools.mp4

The user can buy NFT using the chrome wallet extension, but can't buy NFT using the desktop app.

Bug Type

Functional

Reproduction steps

  1. Go to GetGems
  2. Choose any NFT
  3. Click buy
  4. Click 'TON Wallet' tab
  5. Click buy

Actual result

Get invitation to install tonkeeper or tonhub instead of redirect to the desktop app.
image

Expected result

Redirect to the desktop application. Something like this:
image
image

Suggested Severity

Medium

Device

Desktop (please complete the following information):

  • OS: windows
  • Browser chrome
  • Version 105

Additional Context

No response

GetGems_NFT не возвращаются после окончания аукциона

Bug Type

Functional

Reproduction steps

  1. размещаем на аукционе NFT
  2. аукцион заканчивается, но NFT остается в аукционном списке
  3. для вывода с аукциона требуется дополнительная авторизация через кошелек

Actual result

NFT остается в статусе аукционной и требует дополнительной авторизации через кошелек

Expected result

NFT не должна быть представлена в перечне NFT, которые доступны через аукцион

С пользователем при публикации на аукционе NFT желательно предложить автоматический возврат с аукциона или, как вариант, возврат при низких комиссиях по операциям

Suggested Severity

Medium

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

2022-09-24.20.20.15.mp4

GetGems_Application Error

Bug Type

UX

Reproduction steps

  1. Авторизуемся через TONKeeper
  2. Заходим в профиль пользователя
  3. Начинаем отмечать "нравится" NFT пользователя
  4. В случайный момент возникает ошибка (повторить не удалось)
    IMG_5010

Actual result

При проставлении отметок "нравится" NFT ПО выдало ошибку в соответствии с скрином

Expected result

Работа без ошибок

Suggested Severity

Low

Device

Устройство: iPhone XS
ОС: iOS15.2.1
Браузер APP TONKeeper
версии 2.6

Additional Context

No response

[Getgems] The getgems page is displayed in Russian.

Bug Type

UI

Reproduction steps

  1. Open the page https://getgems.io
  2. Scroll page down.

Actual result

When you go to the page, the default language is English, but the page appears in Russian.

Expected result

When the default page language is English, the page appears in English.

Suggested Severity

Low

Device

Desktop (please complete the following information):

  • OS: Windows 10 Pro
  • Browser [e.g. chrome, mozilla, yandex]
  • Version [Chrome 105.0.5195.127, Mozilla - 104.0.2, Yandex - 22.9.1.1095 ]

Additional Context

Google - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnPweqij2jG.png
Google footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FYNpBzsQg8A.png
Mozilla - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2F6cng8DfND4.png4
Mozilla footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FiN3O9z0FkD.png
Yandex - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FPO1NoDayiw.png
Yandex footer - https://disk.yandex.by/client/disk?idApp=client&dialog=slider&idDialog=%2Fdisk%2FnVuFnDvfSN.png

GetGems_пользовательские баги

Bug Type

UX

Reproduction steps

Баг 1 не сворачивается меню "Создать"

  1. войдите в профиль
  2. Нажмите на кнопку "Создать"
  3. можно выбирать и "Одиночный NFT" и "NFT в коллекции", но меню не закрывается

Баг 2 не подгружаются метаданные (принудительная загрузка)

  1. заходим в интересующий профиль
  2. смотрим NFT пользователя, а там белые окошки с указанием на принудительное обновление метаданных

Баг 3 долго рассчитывается раритетность

  1. загружаем новую NFT в коллекцию
  2. заходим в NFT смотрим на раритетность, а она еще не посчитана ) видим сообщение "Updating Data"

Actual result

Баг 1
При выборе варианта создания NFT меню не сворачивается

Баг 2
Не подгружаются метаданные NFT при просмотре пользовательской коллекции

Баг 3
После выгрузки NFT не обновлены данные по рарности

Expected result

Баг 1
При выборе варианта создания NFT меню должно свернуться

Баг 2
Подгружаются метаданные NFT при просмотре пользовательской коллекции

Баг 3
Обновлять данные по рарности NFT после загрузки новой NFT в коллекции

Suggested Severity

Low

Device

OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

Баг 1
Снимок экрана 2022-09-21 в 22 26 47
Снимок экрана 2022-09-21 в 22 27 15

Баг 2
Снимок экрана 2022-09-24 в 17 01 48

Баг 3
Снимок экрана 2022-09-24 в 18 45 23
Снимок экрана 2022-09-24 в 18 45 48

GetGems_ошибка при выставлении на продажу NFT

Bug Type

Functional

Reproduction steps

  1. Выставляем NFT из коллекции на продажу по фиксированной цене
  2. Оформляем договор, акцептуем платежи через TONWallet
  3. После обновления страницы на GetGems появляется ошибка

Actual result

Ошибка после подписания контракта на продажу и обновления страницы в GetGems

Expected result

Переход на страницу с NFT без ошибки

Suggested Severity

High

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

Снимок экрана 2022-09-24 в 19 01 28

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.