fix(Clipboard): prevent security risk HTML in window titles from fetching remote URLs

- Default StyledText to PlainText; keep RichText only on notification content
2026-06-08 12:13:31 -04:00 · 2026-05-31 17:41:55 -04:00
parent a32b8911c7
commit 98844a3b85
4 changed files with 6 additions and 0 deletions
@@ -755,6 +755,7 @@ PanelWindow {
                visible: false
                width: Math.max(0, backgroundContainer.width - Theme.spacingL - (Theme.spacingL + Theme.notificationHoverRevealMargin) - popupIconSize - Theme.spacingM)
                text: notificationData ? (notificationData.htmlBody || "") : ""
+                textFormat: Text.RichText
                font.pixelSize: Theme.fontSizeSmall
                elide: Text.ElideNone
                horizontalAlignment: Text.AlignLeft
@@ -912,6 +913,7 @@ PanelWindow {
                        property bool hasMoreText: truncated

                        text: notificationData ? (notificationData.htmlBody || "") : ""
+                        textFormat: Text.RichText
                        color: Theme.surfaceVariantText
                        font.pixelSize: Theme.fontSizeSmall
                        width: parent.width