From ea2c64c9a6fbc22bffbac4e2e57ce0762f5e03ad Mon Sep 17 00:00:00 2001 From: "Danilo M." Date: Tue, 15 Sep 2026 18:13:53 +0200 Subject: feat(notifications): strip remote inline image sources A notification is untrusted input. Inline now renders only for local sources; an http(s) source is removed before the RichText body is shown, so a remote sender cannot make the shell fetch a URL. The row and the balloon share the one sanitizer in the Notify singleton. --- notifications/NotificationBalloon.qml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'notifications') diff --git a/notifications/NotificationBalloon.qml b/notifications/NotificationBalloon.qml index b77ca2a..bfccda3 100644 --- a/notifications/NotificationBalloon.qml +++ b/notifications/NotificationBalloon.qml @@ -123,7 +123,7 @@ Rectangle { Text { width: parent.width visible: text !== "" - text: b.notification.body || "" + text: Notify.sanitize(b.notification.body) textFormat: Text.RichText wrapMode: Text.WordWrap maximumLineCount: 3 -- cgit v1.2.3