diff options
| author | Patrick Lodder <[email protected]> | 2021-02-27 22:53:15 +0100 |
|---|---|---|
| committer | Patrick Lodder <[email protected]> | 2021-02-27 22:53:15 +0100 |
| commit | b2211a41393358f496b6977df7336dd8f5fdfd78 (patch) | |
| tree | db1edbcfcb50bda61e88f20325d5f53bedbf0a2f /src/qt/transactionview.cpp | |
| parent | Merge pull request #1762 from DemonRx/ignore-proxy-connection-error (diff) | |
| download | discoin-b2211a41393358f496b6977df7336dd8f5fdfd78.tar.xz discoin-b2211a41393358f496b6977df7336dd8f5fdfd78.zip | |
[qt] only allow https explorer links
As reported by Fabian Braeunlein of PS Positive Security GmbH
Diffstat (limited to 'src/qt/transactionview.cpp')
| -rw-r--r-- | src/qt/transactionview.cpp | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/qt/transactionview.cpp b/src/qt/transactionview.cpp index 30f4db945..eae920ed4 100644 --- a/src/qt/transactionview.cpp +++ b/src/qt/transactionview.cpp @@ -220,8 +220,9 @@ void TransactionView::setModel(WalletModel *_model) QStringList listUrls = _model->getOptionsModel()->getThirdPartyTxUrls().split("|", QString::SkipEmptyParts); for (int i = 0; i < listUrls.size(); ++i) { - QString host = QUrl(listUrls[i].trimmed(), QUrl::StrictMode).host(); - if (!host.isEmpty()) + QUrl url = QUrl(listUrls[i].trimmed(), QUrl::StrictMode); + QString host = url.host(); + if (!host.isEmpty() && url.scheme() == "https") { QAction *thirdPartyTxUrlAction = new QAction(host, this); // use host as menu item label if (i == 0) |