| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | TransactionHistory: prevent CSV formula injection in writeCSV | Thomas | 2026-06-18 | 1 | -4/+27 |
| | | | | | | | | | | | | | | | | | | | writeCSV wrote the transaction note and subaddress label into the CSV stripping only the quote character. A cell beginning with =, +, - or @ can be interpreted as a formula by spreadsheet software on open, which CSV quoting does not prevent. The transaction note can be attacker-controlled: a payment request's tx_description is stored as the note when the payment is sent, so a crafted note can run a spreadsheet formula when the user later exports and opens their history, potentially enabling data exfiltration or command execution. Prefix affected fields with a single quote so they are treated as text; fields beginning with whitespace or a control character are prefixed too. Co-authored-by: selsta <selsta@sent.at> | ||||
| * | Update year in Cypyright | inson1 | 2024-01-27 | 1 | -1/+1 |
| | | |||||
| * | Merge pull request #3572 | luigi1111 | 2021-09-05 | 1 | -3/+5 |
| |\ | | | | | | | | | 544cff7 TransactionHistory: add description to csv export (selsta) 57c2052 TransactionInfo: add isCoinbase and description (selsta) | ||||
| | * | TransactionHistory: add description to csv export | selsta | 2021-08-31 | 1 | -3/+5 |
| | | | |||||
| * | | TransactionHistory: use displayAmount for amount | selsta | 2021-06-18 | 1 | -2/+1 |
| |/ | |||||
| * | src: fix qt 5.15 warnings | selsta | 2020-04-28 | 1 | -0/+9 |
| | | |||||
| * | TransactionHistory: fix use-after-free bugs | xiphon | 2019-12-16 | 1 | -43/+36 |
| | | |||||
| * | TransactionHistory: guard tx info list against concurrent access | xiphon | 2019-12-04 | 1 | -31/+43 |
| | | |||||
| * | Add copyright headers | mmbyday | 2019-05-01 | 1 | -0/+28 |
| | | |||||
| * | CSV export functionality for transaction history | dsc | 2019-01-21 | 1 | -0/+66 |
| | | |||||
| * | Subaddresses minimal version: supports default account only | kenshi84 | 2018-01-13 | 1 | -3/+7 |
| | | |||||
| * | replace wallet/wallet2_api.h with wallet/api/wallet2_api.h to compile | User | 2017-12-08 | 1 | -1/+1 |
| | | |||||
| * | use 10 as default required confirmations | Jaquee | 2017-10-23 | 1 | -1/+1 |
| | | |||||
| * | History: Support coinbase txs | Jaquee | 2017-08-03 | 1 | -2/+3 |
| | | | | | requires #2247 | ||||
| * | Add estimated time countdown for locked balance | Jaquee | 2017-01-14 | 1 | -2/+22 |
| | | |||||
| * | rename Bitmonero to Monero | Jaquee | 2016-12-13 | 1 | -1/+1 |
| | | |||||
| * | Fix erroneous DateTime & small README change | dEBRUYNE-1 | 2016-11-05 | 1 | -2/+2 |
| | | |||||
| * | TransactionHistory: fix date appearing as NaN | moneromooo.monero | 2016-10-16 | 1 | -4/+4 |
| | | | | | Also make the end dates saner | ||||
| * | TransactionHistory: firstDateTime and lastDateTime properties | Ilya Kitaev | 2016-10-10 | 1 | -2/+33 |
| | | |||||
| * | Transaction history is not crashing and refreshing properly | Ilya Kitaev | 2016-10-10 | 1 | -18/+17 |
| | | |||||
| * | Simple transaction history | Ilya Kitaev | 2016-10-10 | 1 | -0/+8 |
| | | |||||
| * | added TransactionHistoryModel; renamings | Ilya Kitaev | 2016-10-10 | 1 | -6/+8 |
| | | |||||
| * | Qt wrappers for libwallet API classes | Ilya Kitaev | 2016-06-08 | 1 | -0/+50 |
 |
index : monzero-gui.git | |
| Monzero desktop wallet graphical interface. | root |
| aboutsummaryrefslogtreecommitdiff |