| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Establish Monzero GUI Phase 0 baselinemonzero-gui-phase0-20260815 | Monzero Build System | 13 hours | 1 | -17/+17 |
| | | |||||
| * | qml: escape untrusted text in remaining RichText views | Thomas | 2026-06-18 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | Extends the escaping from commit 23ec5eb6 to the RichText sinks it did not cover: the transaction note in the tx details popup (History), the wallet name and account label in the send confirmation (TxConfirmationDialog), the address label on the merchant page (Merchant), and the wallet path on the info page (SettingsInfo). These were interpolated unescaped, so a value containing markup is rendered as rich text. The transaction note is the notable case: it can be set from a payment request's tx_description, so it is attacker influenced. Escape these fields with Utils.htmlEscape. Set the send confirmation From field to Text.RichText explicitly so the escaped entities decode in both of its branches; the single-account branch contains no tag and would otherwise render as plain text and show the raw entity. | ||||
| * | merchant: add missing copyright info | jpk68 | 2026-04-22 | 1 | -0/+28 |
| | | |||||
| * | qml: use libwalletqt make_uri function | selsta | 2021-09-05 | 1 | -3/+3 |
| | | |||||
| * | Merchant: display selected subaddress | selsta | 2021-04-21 | 1 | -1/+1 |
| | | |||||
| * | Merge pull request #2901 | luigi1111 | 2020-05-14 | 1 | -0/+7 |
| |\ | | | | | | | 72a3b34 Merchant: allow to exit when height < minHeight (selsta) | ||||
| | * | Merchant: allow to exit when height < minHeight | selsta | 2020-05-12 | 1 | -0/+7 |
| | | | |||||
| * | | Merchant: display size warning when height < minHeight | rating89us | 2020-05-11 | 1 | -2/+3 |
| |/ | |||||
| * | Merchant: fix confirmations | selsta | 2020-04-28 | 1 | -7/+3 |
| | | |||||
| * | Merchant: remove unused variables | selsta | 2020-04-22 | 1 | -6/+0 |
| | | |||||
| * | Merchant: fix payment URL | selsta | 2020-04-22 | 1 | -0/+3 |
| | | | | | This would previously get loaded on the Receive page. | ||||
| * | Merchant: fix close button | selsta | 2020-04-21 | 1 | -1/+1 |
| | | |||||
| * | misc: strip html out of translatable strings | selsta | 2020-02-05 | 1 | -8/+4 |
| | | |||||
| * | Merge pull request #2747 | luigi1111 | 2020-01-30 | 1 | -1/+1 |
| |\ | | | | | | | 6940390 Wallet: implement 'Connecting' status, add 'disconnected' property (xiphon) | ||||
| | * | Wallet: implement 'Connecting' status, add 'disconnected' property | xiphon | 2020-01-28 | 1 | -1/+1 |
| | | | |||||
| * | | Merchant: strip html tags out of translatable string | xiphon | 2020-01-28 | 1 | -1/+4 |
| |/ | |||||
| * | Translation: fix untranslated strings | selsta | 2019-12-02 | 1 | -3/+3 |
| | | |||||
| * | ContextMenu: implement 'paste' context menu for all text fields | xiphon | 2019-11-08 | 1 | -1/+1 |
| | | |||||
| * | Merchant: fix leaving the page | xiphon | 2019-11-01 | 1 | -4/+0 |
| | | |||||
| * | QML: fix more warnings | selsta | 2019-07-22 | 1 | -1/+1 |
| | | |||||
| * | QML: fix various warnings | selsta | 2019-07-21 | 1 | -7/+4 |
| | | |||||
| * | Remove scaleRatio | dsc | 2019-04-25 | 1 | -58/+58 |
| | | |||||
| * | White theme | dsc | 2019-04-24 | 1 | -17/+23 |
| | | |||||
| * | Merchant: remove unintentional file and add emptryString | selsta | 2019-04-19 | 1 | -6/+6 |
| | | |||||
| * | transfer, merchant: placehodler text for amount | mmbyday | 2019-02-25 | 1 | -0/+1 |
| | | |||||
| * | merchant: fix timezone offset | selsta | 2019-01-10 | 1 | -1/+1 |
| | | |||||
| * | Merchant page | dsc | 2018-12-29 | 1 | -0/+699 |
