qml: escape untrusted text in RichText views

2026-04-17 18:02:58 +02:00
parent 49c3e498c7
commit 23ec5eb6a1
3 changed files with 13 additions and 2 deletions
--- a/pages/settings/SettingsLog.qml
+++ b/pages/settings/SettingsLog.qml
@@ -180,7 +180,7 @@ Rectangle {
                        consoleArea.append(msg);
                    }
                    function logMessage(msg){
-                        msg = msg.trim();
+                        msg = Utils.htmlEscape(msg.trim());
                        var color = MoneroComponents.Style.defaultFontColor;
                        if(msg.toLowerCase().indexOf('error') >= 0){
                            color = MoneroComponents.Style.errorColor;