Fix a phishing vulnerability related to HTML in memo fields
Original report by @s-rah here: ZcashFoundation#205
This commit is contained in:
@@ -886,6 +886,7 @@ void MainWindow::setupTransactionsTab() {
|
||||
|
||||
if (!memo.isEmpty()) {
|
||||
QMessageBox mb(QMessageBox::Information, tr("Memo"), memo, QMessageBox::Ok, this);
|
||||
mb.setTextFormat(Qt::PlainText);
|
||||
mb.setTextInteractionFlags(Qt::TextSelectableByMouse | Qt::TextSelectableByKeyboard);
|
||||
mb.exec();
|
||||
}
|
||||
@@ -934,6 +935,7 @@ void MainWindow::setupTransactionsTab() {
|
||||
if (!memo.isEmpty()) {
|
||||
menu.addAction(tr("View Memo"), [=] () {
|
||||
QMessageBox mb(QMessageBox::Information, tr("Memo"), memo, QMessageBox::Ok, this);
|
||||
mb.setTextFormat(Qt::PlainText);
|
||||
mb.setTextInteractionFlags(Qt::TextSelectableByMouse | Qt::TextSelectableByKeyboard);
|
||||
mb.exec();
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user