Monzero desktop wallet graphical interface. https://code.monzero.org/monzero-gui.git/atom?h=main 2026-08-15T20:26:40Z 2026-08-15T20:26:40Z Monzero Build System builds@monzero.org 2026-08-15T20:26:40Z urn:sha1:dceeb88444ce966caa1a133d2926d5f7213c87ff 2026-06-18T12:17:25Z Thomas thomas.giudici@proton.me 2026-06-18T11:34:27Z urn:sha1:3d3a391ef43b1ac09160f4d572d5fbf85f249dc8 Extends the escaping from commit 23ec5eb6 to the RichText sinks it did not cover: the transaction note in the tx details popup (History), the wallet name and account label in the send confirmation (TxConfirmationDialog), the address label on the merchant page (Merchant), and the wallet path on the info page (SettingsInfo). These were interpolated unescaped, so a value containing markup is rendered as rich text. The transaction note is the notable case: it can be set from a payment request's tx_description, so it is attacker influenced. Escape these fields with Utils.htmlEscape. Set the send confirmation From field to Text.RichText explicitly so the escaped entities decode in both of its branches; the single-account branch contains no tag and would otherwise render as plain text and show the raw entity. 2025-08-03T17:26:11Z j-berman justinberman@protonmail.com 2023-11-17T00:38:52Z urn:sha1:5332495c2404ab4b102c98c22419e70143b1dc90 2025-03-03T02:45:44Z b4n6-b4n6 b4n6-b4n6@yogi.pro 2025-03-03T02:42:27Z urn:sha1:da71a00be29b9414124a67f6e97cfcabe5a43519 2024-01-27T19:12:09Z inson1 75314629+inson1@users.noreply.github.com 2024-01-27T19:12:09Z urn:sha1:8851e71a8beafb5297be46dbb4d6884aa87bcdd5 2022-12-02T04:56:51Z selsta selsta@sent.at 2022-12-02T04:56:51Z urn:sha1:7faec48c0a0a404fe66af3f211fd34555b647716 2022-05-05T15:18:15Z reemuru rimuru@hiahatf.org 2022-05-05T15:17:36Z urn:sha1:cddf3c3cdb4c8a27f9dded3344762e48ad13301f Adding support for reserve proof added an additional argument to the getProofClicked signal. The payment proof button on the transaction list from history.qml does not pass this argument and fails with insufficient argument error. Fixes: 0f67580e ("Advanced: ReserveProof: Add support for reserve proof") 2021-12-11T03:02:35Z selsta selsta@sent.at 2021-12-11T03:02:35Z urn:sha1:6b926b319927db07794c01f5402ec1f7c49a9d63 2021-07-25T22:42:44Z selsta selsta@sent.at 2021-07-25T22:42:44Z urn:sha1:57f9cf9d85b430c4cde20170b37c75b85e151d0d 2021-07-06T15:43:48Z luigi1111 luigi1111w@gmail.com 2021-07-06T15:43:48Z urn:sha1:2d82439b56e7dc6ca66e7fd00c1946ef297c6c1c 3eae630 History: collapse 'Sort & Filter' when user types (rating89us)