aboutsummaryrefslogtreecommitdiff
path: root/src/libwalletqt
Commit message (Collapse)AuthorAgeFilesLines
* TransactionHistory: prevent CSV formula injection in writeCSVThomas2026-06-181-4/+27
| | | | | | | | | | | | | | | | | | writeCSV wrote the transaction note and subaddress label into the CSV stripping only the quote character. A cell beginning with =, +, - or @ can be interpreted as a formula by spreadsheet software on open, which CSV quoting does not prevent. The transaction note can be attacker-controlled: a payment request's tx_description is stored as the note when the payment is sent, so a crafted note can run a spreadsheet formula when the user later exports and opens their history, potentially enabling data exfiltration or command execution. Prefix affected fields with a single quote so they are treated as text; fields beginning with whitespace or a control character are prefixed too. Co-authored-by: selsta <selsta@sent.at>
* Merge pull request #4602tobtoht2026-06-171-1/+1
|\ | | | | | | | | | | 1627661 libwalletqt: capture background sync password by value (selsta) ACKs: plowsof
| * libwalletqt: capture background sync password by valueselsta2026-06-031-1/+1
| |
* | libwalletqt: start wallet refresh worker lazilyselsta2026-06-052-1/+15
|/
* Implement background sync when lockedj-berman2025-08-032-0/+85
|
* Update year in Cypyrightinson12024-01-2725-25/+25
|
* remove output blackballingtobtoht2023-03-032-46/+0
|
* Fix behavior when switching nodesj-berman2022-09-212-8/+22
| | | | | | - Improved synchronization when switching nodes - Avoid infinite "Connecting" loop - Pause refresh loop while switching, don't start until connected
* libwalletqt: refresh once on wallet openingselsta2022-08-062-1/+5
| | | | Co-authored-by: tobtoht <thotbot@protonmail.com>
* libwallet: add scanTransactions functionselsta2022-05-282-0/+15
|
* libwalletqt: fix typo in typeselsta2022-03-041-2/+2
|
* Advanced: ReserveProof: Add support for reserve proofreemuru2022-01-202-0/+21
| | | | | | | | | | This change adds the ability to prove and check a reserve proof to this existing "Prove/check" advanced menu. If the amount line has a valid amount less than that of the current account index this input will drive the logic for generating a reserve proof. Checking a reserve proof is accomplished by validating the address and verifying that signature.indexOf("ReserveProofV") === 0. The result displays the total and spent amount of the proof.
* Merge pull request #3687luigi11112021-09-094-0/+17
|\ | | | | | | | | f327d20 qml: use libwalletqt make_uri function (selsta) dcc16a4 libwalletqt: add make_uri function (selsta)
| * libwalletqt: add make_uri functionselsta2021-09-054-0/+17
| |
* | Merge pull request #3572luigi11112021-09-053-3/+22
|\ \ | | | | | | | | | | | | 544cff7 TransactionHistory: add description to csv export (selsta) 57c2052 TransactionInfo: add isCoinbase and description (selsta)
| * | TransactionHistory: add description to csv exportselsta2021-08-311-3/+5
| | |
| * | TransactionInfo: add isCoinbase and descriptionselsta2021-06-182-0/+17
| | |
* | | Merge pull request #3435luigi11112021-09-052-0/+12
|\ \ \ | | | | | | | | | | | | | | | | 36940f0 Transfer: add support for outputs import / export (selsta) e36b166 Wallet: import / export output function (tobtoht)
| * | | Wallet: import / export output functiontobtoht2021-09-032-0/+12
| | |/ | |/|
* | | Merge pull request #3282luigi11112021-09-052-3/+3
|\ \ \ | | | | | | | | | | | | 6dd7445 Transfer: export all key images by default (benevanoff)
| * | | Transfer: export all key images by defaultbenevanoff2020-12-252-3/+3
| | | |
* | | | Merge pull request #3096luigi11112021-09-052-0/+17
|\ \ \ \ | |_|/ / |/| | | | | | | AddressBook: description edits, remove hack (selsta)
| * | | AddressBook: description edits, remove hackselsta2021-08-312-0/+17
| | | | | | | | | | | | | | | | Co-authored-by: dsc <dsc@xmr.pm>
* | | | Receive: implement payment requestrating89us2021-08-192-0/+11
| | | |
* | | | cmake: remove unnecessary file globbingselsta2021-07-101-4/+0
| | | |
* | | | Merge pull request #3562luigi11112021-07-062-4/+0
|\ \ \ \ | | | | | | | | | | | | | | | 6610f6f cmake: fix compilation with zxcvbn, always enable (selsta)
| * | | | cmake: fix compilation with zxcvbn, always enableselsta2021-06-142-4/+0
| | |_|/ | |/| |
* / | | TransactionHistory: use displayAmount for amountselsta2021-06-181-2/+1
|/ / /
* | | Merge pull request #3439luigi11112021-04-292-17/+0
|\ \ \ | | | | | | | | | | | | 51ece5f Wallet: drop unused paymentId property (xiphon)
| * | | Wallet: drop unused paymentId propertyxiphon2021-04-252-17/+0
| | | |
* | | | Merge pull request #3436luigi11112021-04-292-8/+0
|\ \ \ \ | | | | | | | | | | | | | | | 14b1476 History: cleanup unused lookupPaymentID function (selsta)
| * | | | History: cleanup unused lookupPaymentID functionselsta2021-04-242-8/+0
| | | | |
* | | | | Merge pull request #3431luigi11112021-04-241-19/+4
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | 4e67cd0 Wallet: omit redundant 'delete' on destruction (xiphon)
| * | | | Wallet: omit redundant 'delete' on destructionxiphon2021-04-221-19/+4
| |/ / /
* / / / WalletManager: support kdf round in device wallet restoreselsta2021-04-202-7/+9
|/ / /
* | | Wallet: fix transfer with Qt 5.12selsta2021-04-132-7/+11
| | |
* | | TxConfirmationDialog: implement multiple recipients support, layout fixesxiphon2021-03-032-4/+16
| | |
* | | Merge pull request #3327luigi11112021-02-182-14/+30
|\ \ \ | | | | | | | | | | | | b20b956 Wallet: estimateTransactionFeeAsync - multi dest support (xiphon)
| * | | Wallet: estimateTransactionFeeAsync - multi dest supportxiphon2021-02-042-14/+30
| | | |
* | | | Wallet: refactor createTransactionxiphon2021-01-252-24/+48
|/ / /
* | / Subaddress: log account subaddresses refresh errorxiphon2021-01-141-1/+8
| |/ |/|
* | Wallet: fix initialization flag handlingxiphon2020-12-122-9/+24
| |
* | Merge pull request #3181Alexander Blair2020-10-191-5/+5
|\ \ | | | | | | | | | 6ee5effc Wallet: fix different signedness comparison (-Werror=sign-compare) (xiphon)
| * | Wallet: fix different signedness comparison (-Werror=sign-compare)xiphon2020-10-181-5/+5
| | | | | | | | | | | | Co-authored-by: Bertrand Jacquin <bertrand@jacquin.bzh>
* | | Wallet: interrupt refresh thread on wallet closexiphon2020-10-171-0/+2
|/ /
* | Wallet: rework wallet refreshingxiphon2020-10-092-41/+90
| |
* | QR-Code-generator: remove from repo, use monero qrcodegenselsta2020-09-251-1/+1
|/
* Wallet: WalletManager: implement proxy supportxiphon2020-07-304-7/+100
|
* WalletManager: instantiable QML typexiphon2020-07-292-15/+3
|
* WalletManager: parse_uri_to_object extra parameters supportxiphon2020-07-161-2/+16
|