security #7

[flexsurfer]

https://github.com/status-im/security-reports/issues/7

[ghost]

Pull Request Checklist

• Have you updated the documentation, if impacted (e.g. docs.status.im)?

[vitvly]

I don't have access to security-reports repo. Why do we need to delay calls to navigation-state-changed?

[status-im-auto]

Jenkins Builds

❔	Commit	#️⃣	Finished (UTC)	Duration	Platform	Result
✔️	c6d525b	#1	2019-09-04 10:43:55	~11 min	android-e2e	📦 apk
✔️	c6d525b	#1	2019-09-04 10:44:12	~11 min	ios	📦 ipa
✔️	c6d525b	#1	2019-09-04 10:45:29	~12 min	android	📦 apk

[flexsurfer]

to fix #7 )
setInterval(location.assign("https://www.hackerone.com") 5);

[vitvly]

@flexsurfer oh, ok :)

[yenda]

so it turns every timeout into a 500ms timeout?

[statustestbot]

93% of end-end tests have passed

Total executed tests: 45
Failed tests: 3
Passed tests: 42

Failed tests (3)

Click to expand

1. test_add_account_to_multiaccount_instance

Device 1: Tap on AddAccountButton Device 1: Tap on AddAnAccountButton Device 1: 'GenerateNewAccountButton' is not found on the screen Device sessions Device 1: Steps, video, logs Failure screenshot

2. test_backup_recovery_phrase

Device 1: Tap on OkContinueButton Device 1: Tap on NextButton 2 Device sessions Device 1: Steps, video, logs Failure screenshot

3. test_backup_recovery_phrase_warning_from_wallet

Device 1: Wait for BackupRecoveryPhrase Device 1: Wait for BackupRecoveryPhrase Device 1: 'BackupRecoveryPhrase' is not found on the screen Device sessions Device 1: Steps, video, logs Failure screenshot

Passed tests (42)

Click to expand

1. test_block_user_from_public_chat

Device sessions Device 2: Steps, video, logs Device 1: Steps, video, logs

2. test_filters_from_daap

Device sessions Device 1: Steps, video, logs

3. test_copy_and_paste_messages

Device sessions Device 1: Steps, video, logs

4. test_send_transaction_from_daap

Device sessions Device 1: Steps, video, logs

5. test_deploy_contract_from_daap

Device sessions Device 1: Steps, video, logs

6. test_open_transaction_on_etherscan

Device sessions Device 1: Steps, video, logs

7. test_public_chat_messaging

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

8. test_long_press_to_delete_1_1_chat

Device sessions Device 1: Steps, video, logs

9. test_password_in_logcat_sign_in

Device sessions Device 1: Steps, video, logs

10. test_text_message_1_1_chat

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

11. test_add_to_contacts

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

12. test_sign_typed_message

Device sessions Device 1: Steps, video, logs

13. test_unread_messages_counter_1_1_chat

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

14. test_logcat_send_transaction_from_daap

Device sessions Device 1: Steps, video, logs

15. test_send_message_in_group_chat

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

16. test_logcat_send_transaction_from_wallet

Device sessions Device 1: Steps, video, logs

17. test_send_token_with_7_decimals

Device sessions Device 1: Steps, video, logs

18. test_offline_messaging_1_1_chat

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

19. test_modify_transaction_fee_values

Device sessions Device 1: Steps, video, logs

20. test_send_eth_from_wallet_to_address

Device sessions Device 1: Steps, video, logs

21. test_manage_assets

Device sessions Device 1: Steps, video, logs

22. test_long_press_to_delete_public_chat

Device sessions Device 1: Steps, video, logs

23. test_send_emoji

Device sessions Device 1: Steps, video, logs

24. test_search_chat_on_home

Device sessions Device 1: Steps, video, logs

25. test_logcat_recovering_account

Device sessions Device 1: Steps, video, logs

26. test_can_add_existing_ens

Device sessions Device 1: Steps, video, logs

27. test_messaging_in_different_networks

Device sessions Device 2: Steps, video, logs Device 1: Steps, video, logs

28. test_logcat_sign_message_from_daap

Device sessions Device 1: Steps, video, logs

29. test_switch_users_and_add_new_account

Device sessions Device 1: Steps, video, logs

30. test_send_stt_from_wallet

Device sessions Device 1: Steps, video, logs

31. test_login_with_new_account

Device sessions Device 1: Steps, video, logs

32. test_start_chat_with_ens

Device sessions Device 1: Steps, video, logs

33. test_add_contact_from_public_chat

Device sessions Device 2: Steps, video, logs Device 1: Steps, video, logs

34. test_send_two_transactions_one_after_another_in_dapp

Device sessions Device 1: Steps, video, logs

35. test_password_in_logcat_creating_account

Device sessions Device 1: Steps, video, logs

36. test_offline_status

Device sessions Device 1: Steps, video, logs

37. test_open_google_com_via_open_dapp

Device sessions Device 1: Steps, video, logs

38. test_unread_messages_counter_public_chat

Device sessions Device 1: Steps, video, logs Device 2: Steps, video, logs

39. test_sign_message_from_daap

Device sessions Device 1: Steps, video, logs

40. test_user_can_remove_profile_picture

Device sessions Device 1: Steps, video, logs

41. test_share_contact_code_and_wallet_address

Device sessions Device 1: Steps, video, logs

42. test_refresh_button_browsing_app_webview

Device sessions Device 1: Steps, video, logs

[Serhy]

@flexsurfer I can't reproduce issue (https://github.com/status-im/security-reports/issues/7#issuecomment-506399457) anymore with iOS 12, Android 6.0.1, Android 8.1, Android 9
Can use DApps as before (buy and sell cryptokitty, transactions in SimpleDapp)