diff options
| author | selsta <selsta@sent.at> | 2026-04-17 18:02:58 +0200 |
|---|---|---|
| committer | selsta <selsta@sent.at> | 2026-04-17 18:02:58 +0200 |
| commit | 23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959 (patch) | |
| tree | ecf14bd8dd24d33aa9542f18fc5c159c00ffa308 /components | |
| parent | 49c3e498c79b28740a7febb8c74dfa87dbf20298 (diff) | |
| download | monzero-gui-23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959.tar.gz monzero-gui-23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959.tar.xz monzero-gui-23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959.zip | |
qml: escape untrusted text in RichText views
Diffstat (limited to 'components')
| -rw-r--r-- | components/TxConfirmationDialog.qml | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/components/TxConfirmationDialog.qml b/components/TxConfirmationDialog.qml index dc55a6f5..1700aa0a 100644 --- a/components/TxConfirmationDialog.qml +++ b/components/TxConfirmationDialog.qml @@ -32,6 +32,7 @@ import QtQuick.Controls 2.2 import QtQuick.Layouts 1.1 import "../components" as MoneroComponents +import "../js/Utils.js" as Utils import FontAwesome 1.0 Rectangle { @@ -306,7 +307,7 @@ Rectangle { } var title; if (addressBookName) { - title = FontAwesome.addressBook + " " + addressBookName; + title = FontAwesome.addressBook + " " + Utils.htmlEscape(addressBookName); } else { title = qsTr("Monero address") + translationManager.emptyString; } |