Monzero desktop wallet graphical interface. https://code.monzero.org/monzero-gui.git/atom?h=main 2026-08-15T20:26:40Z 2026-08-15T20:26:40Z Monzero Build System builds@monzero.org 2026-08-15T20:26:40Z urn:sha1:dceeb88444ce966caa1a133d2926d5f7213c87ff 2026-06-18T12:17:25Z Thomas thomas.giudici@proton.me 2026-06-18T11:34:27Z urn:sha1:3d3a391ef43b1ac09160f4d572d5fbf85f249dc8 Extends the escaping from commit 23ec5eb6 to the RichText sinks it did not cover: the transaction note in the tx details popup (History), the wallet name and account label in the send confirmation (TxConfirmationDialog), the address label on the merchant page (Merchant), and the wallet path on the info page (SettingsInfo). These were interpolated unescaped, so a value containing markup is rendered as rich text. The transaction note is the notable case: it can be set from a payment request's tx_description, so it is attacker influenced. Escape these fields with Utils.htmlEscape. Set the send confirmation From field to Text.RichText explicitly so the escaped entities decode in both of its branches; the single-account branch contains no tag and would otherwise render as plain text and show the raw entity. 2024-01-27T19:12:09Z inson1 75314629+inson1@users.noreply.github.com 2024-01-27T19:12:09Z urn:sha1:8851e71a8beafb5297be46dbb4d6884aa87bcdd5 2022-07-28T00:57:41Z plowsof 77655812+plowsof@users.noreply.github.com 2022-07-28T00:57:41Z urn:sha1:f796be37ce25bf0aee899f6f41265b6bf83fe19e If you accidentally copy and paste a date with a new line character ``` 2022-01-01 ``` The gui will restore from 2022. I ran into this problem when helping someone just now, after giving them the correct date to copy and paste so they can restore quicker xD caused some confusion. the reg exp method used here https://github.com/monero-project/monero-gui/blob/064c145aa8dc68d28ac8b4aa04ae8b4dbad2e2ce/wizard/WizardRestoreWallet1.qml#L277 prevents you from copy and pasting the 'wrong' string which might be annoying 2022-01-13T20:20:29Z rating89us 45968869+rating89us@users.noreply.github.com 2021-12-05T10:06:41Z urn:sha1:fa9285a10899c49e4d81e31035c7cdef6af5403d 2021-07-09T21:00:18Z rating89us 45968869+rating89us@users.noreply.github.com 2021-07-09T20:57:39Z urn:sha1:363148241988db395da1e70ca59ebbf6d5758755 2021-06-22T00:30:54Z selsta selsta@sent.at 2021-06-22T00:30:54Z urn:sha1:54e183a7f58760f2d9f5419378dd03418b2916a3 2021-06-15T14:34:07Z rating89us 45968869+rating89us@users.noreply.github.com 2021-06-15T11:44:47Z urn:sha1:dfe8146f5c48b8ea67c417b9e2b406c1ef80a3a7 2020-11-02T00:26:40Z selsta selsta@sent.at 2020-11-02T00:26:40Z urn:sha1:6fab741f2e12b3091248456955f5306d30498145 2020-10-08T18:28:07Z xiphon xiphon@protonmail.com 2020-10-08T15:52:34Z urn:sha1:3c28ecef93949224f68d301f71d47296cc67e2f5