monzero-gui.git/pages, branch mainMonzero desktop wallet graphical interface.
https://code.monzero.org/monzero-gui.git/atom?h=main2026-08-15T20:26:40ZEstablish Monzero GUI Phase 0 baseline2026-08-15T20:26:40ZMonzero Build Systembuilds@monzero.org2026-08-15T20:26:40Zurn:sha1:dceeb88444ce966caa1a133d2926d5f7213c87ffMerge pull request #46182026-07-01T17:41:58Ztobtohttob@featherwallet.org2026-07-01T17:41:58Zurn:sha1:239a5350cf15b59278e3152a1982a0ac5cb185ff
23930cb Transfer, AddressBook: confirm unauthenticated OpenAlias (selsta)
ACKs: plowsof
Transfer, AddressBook: confirm unauthenticated OpenAlias2026-06-26T00:14:03Zselstaselsta@sent.at2026-06-26T00:14:03Zurn:sha1:23930cb0e909a503171535a0a62b74debba1b885qml: escape untrusted text in remaining RichText views2026-06-18T12:17:25ZThomasthomas.giudici@proton.me2026-06-18T11:34:27Zurn:sha1:3d3a391ef43b1ac09160f4d572d5fbf85f249dc8
Extends the escaping from commit 23ec5eb6 to the RichText sinks it did
not cover: the transaction note in the tx details popup (History), the
wallet name and account label in the send confirmation
(TxConfirmationDialog), the address label on the merchant page
(Merchant), and the wallet path on the info page (SettingsInfo). These
were interpolated unescaped, so a value containing markup is rendered as
rich text.
The transaction note is the notable case: it can be set from a payment
request's tx_description, so it is attacker influenced.
Escape these fields with Utils.htmlEscape. Set the send confirmation
From field to Text.RichText explicitly so the escaped entities decode in
both of its branches; the single-account branch contains no tag and
would otherwise render as plain text and show the raw entity.
Merge pull request #45822026-04-22T18:40:37Ztobtohttob@featherwallet.org2026-04-22T18:40:37Zurn:sha1:1216e07c471fa2a7c46582dfcbe1070a211303ee
de3fd18a merchant: add missing copyright info (jpk68)
merchant: add missing copyright info2026-04-22T18:11:25Zjpk68jpk68@tutanota.com2026-04-22T18:11:25Zurn:sha1:de3fd18a17f1f7fafd7da352bcb5219017cb0240Transfer: disable offline tx creation with long payment id2026-04-21T17:35:54Zselstaselsta@sent.at2026-04-21T17:31:53Zurn:sha1:b31fae765f3e898083043735ca0954731eb10cf1qml: escape untrusted text in RichText views2026-04-17T16:02:58Zselstaselsta@sent.at2026-04-17T16:02:58Zurn:sha1:23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959Merge pull request #44822025-08-04T11:54:17Ztobtohttob@featherwallet.org2025-08-04T11:54:17Zurn:sha1:f8ad672c44221324ca9ca741828a1497a23bd4eb
614b81f p2pool: add nano sidechain (nahuhh)
Implement background sync when locked2025-08-03T17:26:11Zj-bermanjustinberman@protonmail.com2023-11-17T00:38:52Zurn:sha1:5332495c2404ab4b102c98c22419e70143b1dc90