ecommerce

https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Context

I've create a custom action that redirect to cart page with a success flash, but page open no-product-available modal

Expected Behavior

Show modal only if applies

Actual Behavior

Cart page open a modal if there are a flash, no matter if is success or error

Possible Fix

Fix this view https://github.com/spree/spree/blob/a7f7114d3237ad214aacc9fe96d1676f1c115976/fron

Description (*)

Magento use Prototype js t

Currently, catch block is the same for both methods in useForgotPasswordFactory (https://github.com/vuestorefront/vue-storefront/pull/5971/files/0e001721be751b0b0130915023ea0867722e1065#diff-89077440c1264480ee6ffbbcfb08d6c64c9881bea61ebbd8e0e5d260085b66ad):

err.message = err?.graphQLErrors?.[0]?.message || err.message;

Let's create an external function that takes care of that a

Bug Description:

"No Result Found" message fails to display when user search invalid data in search field on "WooCommerce-> Marketplace" screen.

Environment:

Woocommerce Version : WooCommerce 5.7.0 Beta-1
WordPress version: v5.8

PC:
Windows 10, Mac 10.14.6
Chrome(Version 92.0.4515.131)
Firefox(Version 90.0.2)
Safari: v14.1.2

Steps To Reproduce:

1. Create any test site us

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Describe the bug

Adding certain symbols in the credit slip prefix textbox shows an error saying the prefix is invalid

Expected behavior

I expect to be able to insert symbols as well as in delivery slips (see second screenshot).

Issue Summary

Thanks for introducing the thumbnailing abstraction. It's something we've always wanted to do! Unfortunately, I think I found a small regression.

On one of my Oscar staging sites, not all images that are in the database are actually on disk. This leads to display errors in the frontend. More importantly, the product list in the dashboard becomes totally unusable, because an

Right now the wishlist page shows "Your wishlist is empty" before showing your wishlist items, that should be a loading state instead.

A while ago, we converted API controller specs into requests specs, see #2052. But those specs still have references from their old "life" that we can clean a little bit with a small effort.

In fact, their filenames still have the _controller_ part, which makes no sense now. Eg. solidus/api/spec/requests/spree/api/addresses_controller_spec.rb

Also, they contain references to the previo

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe the bug
Our form example should have native select - SfSelect. There is SfComponentSelect right now.

How to reproduce
Steps to reproduce the behavior:

1. Go to Form
2. See select