// DragonX Wallet - ImGui Edition // Copyright 2024-2026 The Hush Developers // Released under the GPLv3 #include "payment_uri.h" #include #include #include #include #include namespace dragonx { namespace util { std::string urlEncode(const std::string& value) { std::string out; out.reserve(value.size()); for (unsigned char c : value) { if (std::isalnum(c) || c == '-' || c == '_' || c == '.' || c == '~') { out += static_cast(c); } else if (c == ' ') { out += "%20"; } else { char hex[4]; std::snprintf(hex, sizeof(hex), "%%%02X", c); out += hex; } } return out; } std::string buildPaymentUri(const std::string& address, double amount, const std::string& label, const std::string& memo) { if (address.empty()) return ""; std::ostringstream uri; uri << "drgx:" << address; bool hasParams = false; auto addParam = [&](const char* key, const std::string& value) { if (value.empty()) return; uri << (hasParams ? "&" : "?") << key << "=" << value; hasParams = true; }; if (amount > 0.0) { std::ostringstream amt; amt << std::fixed << std::setprecision(8) << amount; addParam("amount", amt.str()); } addParam("label", urlEncode(label)); addParam("memo", urlEncode(memo)); return uri.str(); } std::string urlDecode(const std::string& encoded) { std::string result; result.reserve(encoded.size()); for (size_t i = 0; i < encoded.size(); i++) { if (encoded[i] == '%' && i + 2 < encoded.size()) { // Decode hex pair char hex[3] = { encoded[i + 1], encoded[i + 2], '\0' }; char* end; long val = strtol(hex, &end, 16); if (end == hex + 2) { result += static_cast(val); i += 2; continue; } } else if (encoded[i] == '+') { result += ' '; continue; } result += encoded[i]; } return result; } bool isPaymentURI(const std::string& str) { // Check for drgx: or hush: prefix (case insensitive) std::string lower = str; std::transform(lower.begin(), lower.end(), lower.begin(), ::tolower); return lower.substr(0, 5) == "drgx:" || lower.substr(0, 5) == "hush:"; } PaymentURI parsePaymentURI(const std::string& uri) { PaymentURI result; result.valid = false; // Check prefix if (!isPaymentURI(uri)) { result.error = "Invalid URI scheme. Expected drgx: or hush:"; return result; } // Skip the scheme prefix (drgx: or hush:) size_t schemeEnd = uri.find(':'); if (schemeEnd == std::string::npos) { result.error = "Invalid URI format"; return result; } std::string remainder = uri.substr(schemeEnd + 1); // Handle double-slash format (drgx://address) if (remainder.size() >= 2 && remainder[0] == '/' && remainder[1] == '/') { remainder = remainder.substr(2); } // Split address and query string size_t queryStart = remainder.find('?'); if (queryStart == std::string::npos) { // No query parameters, just the address result.address = remainder; } else { result.address = remainder.substr(0, queryStart); std::string queryString = remainder.substr(queryStart + 1); // Parse query parameters std::istringstream queryStream(queryString); std::string param; while (std::getline(queryStream, param, '&')) { size_t eqPos = param.find('='); if (eqPos == std::string::npos) continue; std::string key = param.substr(0, eqPos); std::string value = urlDecode(param.substr(eqPos + 1)); // Convert key to lowercase for case-insensitive matching std::transform(key.begin(), key.end(), key.begin(), ::tolower); if (key == "amount" || key == "amt") { try { result.amount = std::stod(value); } catch (...) { // Invalid amount, keep as 0 } } else if (key == "label") { result.label = value; } else if (key == "memo") { result.memo = value; } else if (key == "message" || key == "msg") { result.message = value; } } } // Validate address if (result.address.empty()) { result.error = "No address specified in URI"; return result; } // Basic address format check. NOTE: this is format-only by design — the send flow // checksum-validates the recipient (isValidBase58Check / shielded check) before broadcasting, // so an invalid-checksum address parsed here can never actually be sent to. bool validFormat = false; // z-address: starts with 'zs' and is 78+ chars if (result.address[0] == 'z' && result.address.size() >= 78) { validFormat = true; } // t-address: starts with 'R' (DragonX) or 't' (HUSH) and is ~34 chars else if ((result.address[0] == 'R' || result.address[0] == 't') && result.address.size() >= 26 && result.address.size() <= 36) { validFormat = true; } if (!validFormat) { result.error = "Invalid address format"; return result; } // Validate amount if present if (result.amount < 0) { result.error = "Invalid negative amount"; return result; } result.valid = true; return result; } } // namespace util } // namespace dragonx