| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Establish Monzero GUI Phase 0 baselinemonzero-gui-phase0-20260815 | Monzero Build System | 8 hours | 1 | -26/+26 |
| | | |||||
| * | qml: escape untrusted text in remaining RichText views | Thomas | 2026-06-18 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | | | | Extends the escaping from commit 23ec5eb6 to the RichText sinks it did not cover: the transaction note in the tx details popup (History), the wallet name and account label in the send confirmation (TxConfirmationDialog), the address label on the merchant page (Merchant), and the wallet path on the info page (SettingsInfo). These were interpolated unescaped, so a value containing markup is rendered as rich text. The transaction note is the notable case: it can be set from a payment request's tx_description, so it is attacker influenced. Escape these fields with Utils.htmlEscape. Set the send confirmation From field to Text.RichText explicitly so the escaped entities decode in both of its branches; the single-account branch contains no tag and would otherwise render as plain text and show the raw entity. | ||||
| * | qml: escape untrusted text in RichText views | selsta | 2026-04-17 | 1 | -1/+2 |
| | | |||||
| * | Update year in Cypyright | inson1 | 2024-01-27 | 1 | -1/+1 |
| | | |||||
| * | TxConfirmationDialog: warn high fees | selsta | 2022-04-27 | 1 | -3/+4 |
| | | |||||
| * | TxConfirmationDialog: fix displaying of "<" when using fontMonoRegular | rating89us | 2021-06-29 | 1 | -1/+1 |
| | | |||||
| * | TxConfirmationDialog: implement multiple recipients support, layout fixes | xiphon | 2021-03-03 | 1 | -62/+76 |
| | | |||||
| * | TxConfirmationDialog: fix keys handling | xiphon | 2020-12-01 | 1 | -42/+2 |
| | | |||||
| * | transfer: new TxConfirmationDialog | rating89us | 2020-10-17 | 1 | -0/+466 |
 |
index : monzero-gui.git | |
| Monzero desktop wallet graphical interface. | root |
| aboutsummaryrefslogtreecommitdiff |