shop

https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Context

I've create a custom action that redirect to cart page with a success flash, but page open no-product-available modal

Expected Behavior

Show modal only if applies

Actual Behavior

Cart page open a modal if there are a flash, no matter if is success or error

Possible Fix

Fix this view https://github.com/spree/spree/blob/a7f7114d3237ad214aacc9fe96d1676f1c115976/fron

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the