From 23ec5eb6a1dc61ef72a3ca4c9bb5942cbf60d959 Mon Sep 17 00:00:00 2001
From: selsta <selsta@sent.at>
Date: Fri, 17 Apr 2026 18:02:58 +0200
Subject: qml: escape untrusted text in RichText views

---
 components/TxConfirmationDialog.qml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'components')

diff --git a/components/TxConfirmationDialog.qml b/components/TxConfirmationDialog.qml
index dc55a6f5..1700aa0a 100644
--- a/components/TxConfirmationDialog.qml
+++ b/components/TxConfirmationDialog.qml
@@ -32,6 +32,7 @@ import QtQuick.Controls 2.2
 import QtQuick.Layouts 1.1
 
 import "../components" as MoneroComponents
+import "../js/Utils.js" as Utils
 import FontAwesome 1.0
 
 Rectangle {
@@ -306,7 +307,7 @@ Rectangle {
                             }
                             var title;
                             if (addressBookName) {
-                                title = FontAwesome.addressBook + " " + addressBookName;
+                                title = FontAwesome.addressBook + " " + Utils.htmlEscape(addressBookName);
                             } else {
                                 title = qsTr("Monero address") + translationManager.emptyString;
                             }
-- 
cgit v1.2.3