diff options
| author | tobtoht <tob@featherwallet.org> | 2026-06-22 22:03:43 +0000 |
|---|---|---|
| committer | tobtoht <tob@featherwallet.org> | 2026-06-22 22:03:43 +0000 |
| commit | 0e78e60cd799aaa207125c0c51278f0d481e9dea (patch) | |
| tree | e6ecf52ab97b2f6807f39caec3f523a8fed6fa69 /components | |
| parent | 09fd2997da78f1230f5b123f675285fa3b3ccad2 (diff) | |
| parent | 3d3a391ef43b1ac09160f4d572d5fbf85f249dc8 (diff) | |
| download | monzero-gui-0e78e60cd799aaa207125c0c51278f0d481e9dea.tar.gz monzero-gui-0e78e60cd799aaa207125c0c51278f0d481e9dea.tar.xz monzero-gui-0e78e60cd799aaa207125c0c51278f0d481e9dea.zip | |
Merge pull request #4610
3d3a391 qml: escape untrusted text in remaining RichText views (Thomas)
ACKs: selsta
Diffstat (limited to 'components')
| -rw-r--r-- | components/TxConfirmationDialog.qml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/components/TxConfirmationDialog.qml b/components/TxConfirmationDialog.qml index 1700aa0a..51da022f 100644 --- a/components/TxConfirmationDialog.qml +++ b/components/TxConfirmationDialog.qml @@ -242,6 +242,7 @@ Rectangle { Layout.fillWidth: true font.pixelSize: 15 color: MoneroComponents.Style.defaultFontColor + textFormat: Text.RichText text: { if (currentWallet) { var walletTitle = function() { @@ -257,9 +258,9 @@ Rectangle { if (appWindow.currentWallet.numSubaddressAccounts() > 1) { var currentSubaddressAccount = currentWallet.currentSubaddressAccount; var currentAccountLabel = currentWallet.getSubaddressLabel(currentWallet.currentSubaddressAccount, 0); - return walletTitle() + " (" + walletName + ")" + "<br>" + qsTr("Account #") + currentSubaddressAccount + (currentAccountLabel !== "" ? " (" + currentAccountLabel + ")" : "") + translationManager.emptyString; + return walletTitle() + " (" + Utils.htmlEscape(walletName) + ")" + "<br>" + qsTr("Account #") + currentSubaddressAccount + (currentAccountLabel !== "" ? " (" + Utils.htmlEscape(currentAccountLabel) + ")" : "") + translationManager.emptyString; } else { - return walletTitle() + " (" + walletName + ")" + translationManager.emptyString; + return walletTitle() + " (" + Utils.htmlEscape(walletName) + ")" + translationManager.emptyString; } } else { return ""; |