aboutsummaryrefslogtreecommitdiff
path: root/doc/release-process.md
diff options
context:
space:
mode:
authorWladimir J. van der Laan <laanwj@gmail.com>2018-03-06 16:39:45 +0100
committerWladimir J. van der Laan <laanwj@gmail.com>2018-03-06 16:47:31 +0100
commit6fbc0986fa2d49a1cb65b60eca71c25c84842a54 (patch)
tree3ee61edb39dc3c10df345b6b062262d2ffa82e8d /doc/release-process.md
parent9903537750aca5c84a06d4157a3c27b7db3169d3 (diff)
downloadbitcoin-6fbc0986fa2d49a1cb65b60eca71c25c84842a54.tar.xz
gui: Show messages as text not html
Currently, error messages (such as InitError) are displayed as-is, which means Qt does auto detection on the format. This means that it's possible to inject HTML from the command line though e.g. specifying a wallet name with HTML in it. This isn't a direct security risk because fetching content from internet is disabled (and as far as I know we never report strings received from the network this way). However, it can be confusing. So explicitly force the format as text.
Diffstat (limited to 'doc/release-process.md')
0 files changed, 0 insertions, 0 deletions