monzero-gui.git/pages/merchant/Merchant.qml, branch mainMonzero desktop wallet graphical interface.
https://code.monzero.org/monzero-gui.git/atom?h=main2026-08-15T20:26:40ZEstablish Monzero GUI Phase 0 baseline2026-08-15T20:26:40ZMonzero Build Systembuilds@monzero.org2026-08-15T20:26:40Zurn:sha1:dceeb88444ce966caa1a133d2926d5f7213c87ffqml: escape untrusted text in remaining RichText views2026-06-18T12:17:25ZThomasthomas.giudici@proton.me2026-06-18T11:34:27Zurn:sha1:3d3a391ef43b1ac09160f4d572d5fbf85f249dc8
Extends the escaping from commit 23ec5eb6 to the RichText sinks it did
not cover: the transaction note in the tx details popup (History), the
wallet name and account label in the send confirmation
(TxConfirmationDialog), the address label on the merchant page
(Merchant), and the wallet path on the info page (SettingsInfo). These
were interpolated unescaped, so a value containing markup is rendered as
rich text.
The transaction note is the notable case: it can be set from a payment
request's tx_description, so it is attacker influenced.
Escape these fields with Utils.htmlEscape. Set the send confirmation
From field to Text.RichText explicitly so the escaped entities decode in
both of its branches; the single-account branch contains no tag and
would otherwise render as plain text and show the raw entity.
merchant: add missing copyright info2026-04-22T18:11:25Zjpk68jpk68@tutanota.com2026-04-22T18:11:25Zurn:sha1:de3fd18a17f1f7fafd7da352bcb5219017cb0240qml: use libwalletqt make_uri function2021-09-05T03:52:56Zselstaselsta@sent.at2021-09-05T03:48:50Zurn:sha1:f327d20deb08d948829d2c2214af3cc3ac254456Merchant: display selected subaddress2021-04-21T02:13:39Zselstaselsta@sent.at2021-04-21T02:13:39Zurn:sha1:341b267852a0bd6986a3a81857d9ff4e59a52a06Merge pull request #29012020-05-14T21:03:22Zluigi1111luigi1111w@gmail.com2020-05-14T21:03:22Zurn:sha1:80e8dd6aefa26428bbead9a95443886600609d31
72a3b34 Merchant: allow to exit when height < minHeight (selsta)
Merchant: allow to exit when height < minHeight2020-05-12T18:43:46Zselstaselsta@sent.at2020-05-12T18:43:46Zurn:sha1:72a3b346bbf9b61727c80e7f63f8498626654039Merchant: display size warning when height < minHeight2020-05-10T22:42:45Zrating89us45968869+rating89us@users.noreply.github.com2020-05-10T22:42:45Zurn:sha1:d662e46146bf62135688dcd4afc594a1caf8ce9dMerchant: fix confirmations2020-04-28T17:30:22Zselstaselsta@sent.at2020-04-22T20:05:20Zurn:sha1:2102e4be0d0888e66b50ed71150fc9d4b1cb1566Merchant: remove unused variables2020-04-22T20:10:40Zselstaselsta@sent.at2020-04-22T19:59:25Zurn:sha1:3af99e91e4d61b1e63ab3ff780febc338e335add