90 lines
4.5 KiB
Markdown
90 lines
4.5 KiB
Markdown
# Morphit v1.0.0-beta.32
|
|
|
|
This release fixes a bug where your avatar could vanish after a profile edit, makes
|
|
your avatar and display name show up everywhere they should, lets you skip typing
|
|
your account name when you import from a seed phrase, makes that lookup private,
|
|
hardens every text field against pathological input, and adds the usual round of
|
|
polish to the profile and sign-in screens.
|
|
|
|
Nothing here changes how trading works or what anything costs, and Morphit still
|
|
keeps no data about you. If you're already signed in, your account, keys, and
|
|
balances carry over untouched.
|
|
|
|
## Your profile and avatar
|
|
|
|
- **Fixed: your avatar no longer disappears when you change only your bio.** Updating
|
|
one part of your profile (say, just your short bio) used to overwrite the rest,
|
|
which could orphan an avatar you'd already set even though it was still on chain.
|
|
Profile updates now merge field-by-field — an omitted field is left alone, and only
|
|
an explicit clear removes one — so a partial edit keeps everything else intact.
|
|
|
|
- **Your avatar shows up everywhere now.** Once you've set an avatar, it appears in
|
|
the top-right menu and anywhere your identity is shown, not just on your public
|
|
profile page.
|
|
|
|
- **A display name is now optional.** You can set an avatar and links without being
|
|
forced to choose a display name first, and leaving the name blank no longer wipes a
|
|
name you set earlier.
|
|
|
|
- **A bit more room for your avatar.** The inline avatar size limit was raised so more
|
|
designs fit comfortably.
|
|
|
|
- **Clearer broadcast status and a new avatar card in Settings.** Publishing now says
|
|
"Broadcasted" when it lands, and Settings gained a dedicated avatar card with a
|
|
thumbnail preview and a confirmation step before you replace one.
|
|
|
|
## Signing in
|
|
|
|
- **Importing from a seed phrase now finds your account name for you.** A seed phrase
|
|
contains your keys but not your account name, so you used to have to type it in by
|
|
hand. Morphit now looks the name up for you, and if it matches exactly one account
|
|
it signs you straight in. If it's ambiguous or unavailable, you simply enter the
|
|
name as before.
|
|
|
|
- **That lookup is private.** The name lookup goes through your operator's own node,
|
|
so the request — and your connection — never reaches a third-party node directly. If
|
|
the lookup can't be made for any reason, Morphit quietly falls back to asking you
|
|
for the name rather than reaching out to anyone else.
|
|
|
|
- **Import-screen polish.** The remember-me option is gated correctly, and a mismatch
|
|
is flagged with a clear red border. The "sign in with your keys" button shows a lock
|
|
icon on the welcome-back screen.
|
|
|
|
## Privacy and hardening
|
|
|
|
- **Every text field has a length cap.** A site-wide review added a length backstop to
|
|
every free-text input and text area, on top of the existing validation, so an
|
|
oversized or pathological paste can't slip through. The caps are set above every
|
|
legitimate limit, so normal input is never cut off.
|
|
|
|
- **Clearer errors when your key doesn't match.** Before publishing, Morphit now checks
|
|
that your key actually has authority for the action and tells you up front if it
|
|
doesn't, instead of failing further along.
|
|
|
|
## Small fixes and polish
|
|
|
|
- The block-explorer card was removed from the home page (with a subtle hover lift on
|
|
the cards that remain), the slide-in arrow links were unified into one consistent
|
|
style across the app (correct in right-to-left languages too), the FAQ article hover
|
|
border was toned down, and the profile page now shows your identity glyphs without
|
|
repeating the `@handle`, with friendlier titles like "Message @username" on other
|
|
people's profiles.
|
|
|
|
## For operators
|
|
|
|
- **The welcome dust for new accounts was nudged up slightly** so a brand-new account
|
|
has a touch more headroom out of the gate. Funding requirements are otherwise
|
|
unchanged.
|
|
|
|
- As with recent betas, **this release changes no third-party dependencies.**
|
|
|
|
## Under the hood
|
|
|
|
- **Two fresh, independent code reviews** re-ran the full test, type-check, and
|
|
security-smoke suites from a clean slate. The first audited every text input across
|
|
the site for injection and overflow risks and confirmed there's no stored-cross-site
|
|
scripting hole. The second re-checked the new profile, avatar, and seed-import work
|
|
and caught one privacy issue before release: the seed-import name lookup had been
|
|
reaching a third-party node directly. It now routes through your operator's node like
|
|
the rest of Morphit, with a regression check added so a future change can't quietly
|
|
reintroduce a direct lookup.
|