https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Expected result

When visitting /checkout/payment directly from url when no addresses are yet set, customer should be redirected to previous checkout steps; no exception should be raised

Actual result

Visitting /checkout/payment directly from url when no addresses are yet set results in exception being raised;
e.g.:

TypeError
Cannot read property 'streetName' of null

St

A while ago, we converted API controller specs into requests specs, see #2052. But those specs still have references from their old "life" that we can clean a little bit with a small effort.

In fact, their filenames still have the _controller_ part, which makes no sense now. Eg. solidus/api/spec/requests/spree/api/addresses_controller_spec.rb

Also, they contain references to the previo

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe the bug
Text in SfButton (as a link / with link prop) on hover state is black and should be white

How it is:

How should be:
![Screenshot from 2021-05-31 12-44-33](https://user-images.githubusercontent.com/46591755/120181900-f83c5900-c2

Describe the bug

If you add a full width element to a site using the latest Storefront theme, 3.3.0, it will show margins on both sides for mobile view.

• I have deactivated other plugins and themes and confirmed this bug occurs when only WooCommerce + Storefront theme are active.
• I can reproduce this bug consistently using the steps below.

To Reproduce

Steps to reprod

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the