View Issue Details

IDProjectCategoryView StatusLast Update
0007232Talermerchant portal webuipublic2022-11-04 19:52
Reportersebasjm Assigned Tosebasjm Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritylowSeveritytweakReproducibilityalways
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.9Fixed in Version0.9 
Summary0007232: payto field should check bitcoin/ethereum addr checksum
Descriptionbefore the user submit the payto-URI in the bank account field in the new-instance form/ edit-instance form.

right know there is a basic validation:
 bitcoin: ^(bc1|[13])[a-zA-HJ-NP-Z0-9]{25,39}$
 eth: ^(0x)?[0-9a-f]{40}$
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

sebasjm

2022-07-17 14:34

developer   ~0018956

bitcoin is implemented, ethereum is still missing

Christian Grothoff

2022-07-17 14:34

manager   ~0018957

https://github.com/PaulRBerg/ethsum

sebasjm

2022-08-02 15:00

developer   ~0018982

as pointed out here [1] checksum may also depend on `eip1191ChainId` and without this value we may create false positives.

so I will leave the checksum check with the current implementation (valid HEX value of 40 chars)

https://github.com/ethereumjs/ethereumjs-monorepo/blob/master/packages/util/src/account.ts#L138

copy of the comment:

 * Returns a checksummed address.
 *
 * If an eip1191ChainId is provided, the chainId will be included in the checksum calculation. This
 * has the effect of checksummed addresses for one chain having invalid checksums for others.
 * For more details see [EIP-1191](https://eips.ethereum.org/EIPS/eip-1191).
 *
 * WARNING: Checksums with and without the chainId will differ and the EIP-1191 checksum is not
 * backwards compatible to the original widely adopted checksum format standard introduced in
 * [EIP-55](https://eips.ethereum.org/EIPS/eip-55), so this will break in existing applications.
 * Usage of this EIP is therefore discouraged unless you have a very targeted use case.

Issue History

Date ModifiedUsernameFieldChange
2022-04-19 22:03sebasjmNew Issue
2022-04-19 22:03sebasjmStatusnew => assigned
2022-04-19 22:03sebasjmAssigned To => sebasjm
2022-04-21 11:30Christian GrothoffPrioritynormal => low
2022-04-21 11:30Christian GrothoffSeverityfeature => tweak
2022-07-17 14:34sebasjmNote Added: 0018956
2022-07-17 14:34Christian GrothoffNote Added: 0018957
2022-08-02 15:00sebasjmNote Added: 0018982
2022-08-02 15:00sebasjmStatusassigned => informing
2022-08-02 15:00sebasjmResolutionopen => fixed
2022-10-20 08:47Christian GrothoffFixed in Version => 0.9
2022-10-20 08:48Christian GrothoffTarget Versiongit (master) => 0.9
2022-11-04 19:52Christian GrothoffStatusinforming => closed
2026-08-23 14:18Florian DoldCategorymerchant backoffice SPA => merchant portal webui