You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
in the Create method for the basket submodule, we have allowed_classes, and credit_type_abbreviation as some of the basket creation criteria. However, we never actually check if the classes in allowed_classes have the same type specified in credit_type_abbreviation.
This isn't chain-breaking, but it could allow some wonky/bogus baskets to be created. The Put method will still make sure credits being placed in the basket adhere to the credit type AND is one of the allowed classes.
Summary of Bug
in the
Create
method for the basket submodule, we haveallowed_classes
, andcredit_type_abbreviation
as some of the basket creation criteria. However, we never actually check if the classes inallowed_classes
have the same type specified incredit_type_abbreviation
.This isn't chain-breaking, but it could allow some wonky/bogus baskets to be created. The
Put
method will still make sure credits being placed in the basket adhere to the credit type AND is one of the allowed classes.Version
https://github.com/regen-network/regen-ledger/tree/release/v3.0.x and current master branch 88a4b31 (latest commit)
Steps to Reproduce
For Admin Use
The text was updated successfully, but these errors were encountered: