https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Current behavior

Field validation passes when any character from field value is a unicode alpha char.
"%%" does not pass validation, which is the expected behaviour:

However, "Jo$%n Do?" validates c

select2_locale_en-GB.js is missing in the select2_locales folder, selecting English (UK) on the admin backend breaks the app.

Solidus Version:
2.11.3

To Reproduce

1. Open the admin backend
2. Select English (UK) in the language selection menu at the bottom right

Current behavior
It returns an error with the following message:
``
The asset "solidus_admin/select2_locales/s

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe how this feature will help us improve
Describe why do you think this feature is needed.
This component will be needed in MyAccount page or e.g in Header as a logged-in guest.

Describe the bug

If you add a full width element to a site using the latest Storefront theme, 3.3.0, it will show margins on both sides for mobile view.

• I have deactivated other plugins and themes and confirmed this bug occurs when only WooCommerce + Storefront theme are active.
• I can reproduce this bug consistently using the steps below.

To Reproduce

Steps to reprod

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the