maxmustermann/dogecoin
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

[qt] only allow https explorer links

Browse source 
As reported by Fabian Braeunlein of PS Positive Security GmbH
This commit is contained in:
Patrick Lodder 2021-02-27 22:53:15 +01:00
parent 4dd49512e9
commit b2211a4139
No known key found for this signature in database
GPG key ID: 2D3A345B98D0DC1F
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/qt/transactionview.cpp
View file

@ -220,8 +220,9 @@ void TransactionView::setModel(WalletModel *_model)
QStringList listUrls = _model->getOptionsModel()->getThirdPartyTxUrls().split("|", QString::SkipEmptyParts);
for (int i = 0; i < listUrls.size(); ++i)
{
QString host = QUrl(listUrls[i].trimmed(), QUrl::StrictMode).host();
if (!host.isEmpty())
QUrl url = QUrl(listUrls[i].trimmed(), QUrl::StrictMode);
QString host = url.host();
if (!host.isEmpty() && url.scheme() == "https")
{
QAction *thirdPartyTxUrlAction = new QAction(host, this); // use host as menu item label
if (i == 0)