disintar / .github Goto Github PK

Bug Type

UX

Reproduction steps

1. Open main page;
2. Tap on button «Sign in»;
3. Tap on the «Rules» at wallet connect window.

Actual result

Rules opening at the same browser tab without being able to return on the previous page.

Expected result

Opening new browser tab with website rules. All other buttons «Rules» work well with separate tabs.
Screen Recording 2022-09-19 at 01.41.08.mov.zip

Suggested Severity

Low

Device

Desktop:

• OS: macOS 12.5.1
• Browser DuckDuckGo
• Version 0.28.8

Additional Context

No response

Bug Type

Functional

Reproduction steps

User could log in with chrome wallet extension, but can buy or mint NFT only with desktop application.

Mint NFT:

1. Click create NFT
2. Enter all required data
3. Click create

Buy NFT:

1. Click market
2. Click NFTs and choose one
3. Click buy

Actual result

Get "pay with wallet app" button that try to open desktop application. No choice.

Same situation with buying nft:

Expected result

Give the user a choice. This is a critical omission, because a user without or unauthorized in the app simply cannot buy or smith NFT from a computer.

Suggested Severity

High

Device

Desktop (please complete the following information):

• OS: windows
• Browser chrome
• Version 105.0.5195.127

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Open any Room page without authorization.
   
2. Sign in.
3. Click on your authorized account(top right corner icon).

Actual result

Owned, Created NFTs, Created Collections sections display data for a chosen account, but the Room section still displays data from the previous Room.

Expected result

The room section should display data for the chosen account.

Suggested Severity

High

Device

Desktop (please complete the following information):

• OS: Windows 10 Pro
• Browser Google Chrome
• Version 105.0.5195.127

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Make request with errors
   (as example on /create_nft with invalid data param)

Actual result

In response from api show traceback with internal files structure

Expected result

Don't send traceback with internal errors in response

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

UX

Reproduction steps

1. Sign in to https://beta.disintar.io/
2. Go to any collection (https://beta.disintar.io/collection/UQCzuSjkgUND61l7gIH3NvVWNtZ0RX1hxz1rWnmJqGPmZkMX)
3. Click "Follow" button
4. Remove marks from checkboxes :For buying" and "For selling"
5. Click "Save"

Actual result

The sign "Please sign in to subscribe" appeares below Save button.

Expected result

Sign "Choose your subscription type" appears or if it is possible to follow without reason to buy or sell - user follows collection.

Suggested Severity

Low

Device

Win 10
Chrome
105.0.5195.127

Additional Context

No response

Bug Type

UX

Reproduction steps

1. Go to https://beta.disintar.io/

Actual result

Loading of the content is very long

Expected result

Website content loads quickly

Suggested Severity

High

Device

OS: Windows 10 64bit
Browser: Chrome 105.0.5195.127 (64-bit)

Additional Context

Bug Type

Functional

Reproduction steps

1. Go to create NFT
2. Upload any Image and fill fields
3. Put breakpoints on request to /create_nft and replace filename image

Actual result

Possible to upload any file image and made NFT with invalid image (as example: https://beta.disintar.io/object/kQC95xkZhh-9c2qOAhgX56sRTRLlefjaUM-cH1UsJ01SY3s-)

Expected result

Upload image to images server, get image ID and send image ID in request, not a file.

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

Security

Reproduction steps

Open site
During the download, you will see the word Redirect
Press Esc and check the code with some network analyzer
You will know that a CDN is being used

Actual result

Open redirect notification, from irrelevant material to the main page - beta.disintar.io
This is very bad, because the design should not give out the processes going on behind the scenes.
You run the risk of catching a distributed DDoS attack, the Cloudflare server in this case will not save the system. When disinator.io is attacked, the redirect chain will be broken, and the main domain will become inaccessible. Yes, it's expensive, but it greatly increases the number of attacker action scenarios (the attack perimeter is larger).

Expected result

Ask the designer to hide the redirect, then no one will know about the existence of the old domain

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• Windows 10
• Edge/Mozilla
  

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Create account with tonhub
2. Go to create NFT
3. Fill fieilds for NFT
4. Click "Create"
5. Scan QR & pay with wallet

Actual result

Transaction was completed, but backend return
"success": false, "error": "We have not received your transaction yet. Please try in a few seconds" }

Transaction proof
https://tonscan.org/tx/tgolPES0wk1ym8Vx8eShZoWJ9x9-LqzeljbHXPlrCUM=

Expected result

Correction crediting a completed transaction

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Go to profile settings
2. Login with telegram
3. Click "Disconnect from telegram"
4. Repeat request from step 2 to /api/bind_telegram

Actual result

You can add any telegram nickname to profile
https://beta.disintar.io/profile/EQAyydOEBX_MQd-xyrDg9Aoxan7uS5eVS75XXxSoU6sAaH7B

Expected result

Check if account belongs to the user

Suggested Severity

Critical

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

UX

Reproduction steps

1. Open NFT in collection, example: Nicola Tesla;
2. Follow below and tap on grid for making grid 5x5;
3. Tap on the button «Attributes» and choose few check boxes;
4. Tap on the button «Group».

Actual result

1. Grid changes from 5x5 to 3x3;
2. Not available search options on the same page.

Expected result

1. Grid saves previous parameters;
2. Search engine also available after choosing attributes.

Suggested Severity

Medium

Device

Desktop:

• OS: macOS 12.5.1
• Browser DuckDuckGo
• Version 0.28.8

Additional Context

No response

Bug Type

Other

Reproduction steps

1. Visit https://disintar.io/
2. Connect to a ton wallet
3. Click "Create NFT"
4. Open the JavaScript console in Chrome
5. Scroll down the page

Actual result

Expected result

Should not see uncaught JavaScript exceptions.

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• OS: macOS
• Browser: Chrome
• Version: 105

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Go to https://beta.disintar.io/

Actual result

Background is not covering the screen and "DISINTAR" violet line overlaps NFTs in the main block

Expected result

Background covers the screen and violet "DISINTAR" line is not overlaps NFT

Suggested Severity

Low

Device

OS: Windows 10 64bit (1366x768)
Browser: Firefox 104.0.2 (64-bit)

Additional Context

No response

Bug Type

UI

Reproduction steps

When a user bought an NFT and the owner in the blockchain changed, for some reason the information on the site is not updated for some time yet.

Actual result

The user sees as if the NFT still belongs to him, and the buyer does not see the purchased NFT.

30 minutes have passed between the time of purchase and the publication of this report, and the information has not been updated. In the blockchain everything is ok.

Expected result

The NFT should be immediately transferred to the new owner without a delay of 5-10-30 minutes, even though it is only an interface error.

Suggested Severity

Low

Device

• any

Additional Context

proof that the sale-contract finished its working

Bug Type

UI

Reproduction steps

1. Main page
2. Look at the "MARKET"
3. Click it
4. Inconvenient switching between "MARKET" windows. White and black colors look good, but this transition between them annoys the user.

Actual result

Inconvenient switching between "MARKET" windows. White and black colors look good, but this transition between them annoys the user.

Expected result

The color change contrasts sharply

Suggested Severity

Low

Device

Desktop (please complete the following information):

• Windows
• Edge
  

Additional Context

Make a smooth transition or leave the interface uniform. Thus, the client will be immersed in the website interface and will not be distracted by changing the color scheme.

Bug Type

UI

Reproduction steps

1. Go to your profile page e.g. https://beta.disintar.io/profile/<YOUR WALLET ADDRESS>
2. And select either one of the tabs - Owner, Created NFTs, Created Collections

Actual result

Footer flows in the middle of the screen

Expected result

Footer always expected at the bottom of the page

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

1. Visit https://disintar.io/
2. Scan the QR code to connect to Tonkeeper
3. Switch to the "Owned" tab on the profile page

Actual result

Expected result

Existing NFTs including .ton domains should be detected and displayed.

Suggested Severity

High

Device

Desktop (please complete the following information):

• OS: macOS
• Browser: Chrome
• Version: 105

Smartphone (please complete the following information):

• Device: iPhone 13 Pro
• OS: iOS 15.6.1
• Browser: Mobile Safari
• Version: Tonkeeper 2.6

Additional Context

No response

Bug Type

Security

Reproduction steps

1. Open my room: https://beta.disintar.io/profile/EQCX0M7_pQrL7e2jnVYZnXWpJzCK_Z4ryYCWU1qT9I6jdIas
2. Link for unknown NFT: https://beta.disintar.io/profile/EQAyydOEBX_MQd-xyrDg9Aoxan7uS5eVS75XXxSoU6sAaH7B

Actual result

From the user's point of view, this is an inexplicable scenario.

Expected result

Room owners should remain calm and make sure that no one illegally gets to their digital property.

Suggested Severity

Vulnerability

Device

OS: Windows 10
Browser: Chrome
Version: 105.0.5195.127 (Official Build) (64-bit)

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Create any NFT
2. Whilte NFT awaiting moderation try to open url without be logined in system
   (example: https://beta.disintar.io/object/kQC95xkZhh-9c2qOAhgX56sRTRLlefjaUM-cH1UsJ01SY3s-)

Actual result

App crashed, only white screen and JS errors

Expected result

Correction error handling, placeholder or 404 error

Suggested Severity

High

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

Functional

Reproduction steps

1.Go down on the main page
2.Click to link < Designed by Ram >

Actual result

1.User go to page with permanent reloading
https://www.awesomescreenshot.com/video/11137311

Expected result

1.User sees the officially designers page.

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional Context

Bug Type

Performance

Reproduction steps

1. Open
2. Find https://beta.disintar.io/object/kQAnbL3a3jvQ0DJ0DY4ntl5P6sASxZiPW3UVjhz2ChaZbVc5
3. Hover over the video
4. It's shaking like a yolo
   

Actual result

Shaking, I just hover over, it's shaking
Also, I checked other items, they have not these freezes
Maybe, it depends on the resolution and encoding of the uploaded file

Expected result

Shaking - is a very vexing thing. It's should not be there

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• Windows
• Edge
• Version 105.0.1343.42
  

Additional Context

No response

Bug Type

UX

Reproduction steps

1. Open collection «NFT STAMPS»;
2. Tap on the button «Attributes»;
3. Choose «Egypt» theme box only and go to the «Group».

Actual result

Wrong results around all «Theme» attribute. All themes are shown.
Screen Recording 2022-09-19 at 02.11.40.mov.zip

Expected result

Sorting works well and showing all needed result with parameters on previous page.

Suggested Severity

Critical

Device

Desktop:

• OS: macOS 12.5.1
• Browser DuckDuckGo
• Version 0.28.8

Additional Context

No response

Bug Type

Other

Reproduction steps

1. Connect to a ton wallet
2. Click "Create NFT"
3. Click to upload a picture for the item
4. Open the JavaScript console in Chrome
5. Click the picture to bring out the selection dialog box
6. Click "Cancel"

Actual result

Expected result

No JavaScript exceptions should be thrown.

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• OS: macOS
• Browser: Chrome
• Version: 105

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional Context

No response