dacplayproject / qt_play

QT PLAY Web Browser with Blockchain enhencement
The Unlicense
0 stars 2 forks source link

wallet is asked to be unlocked before you can visit external website #10

Open AlexChien opened 9 years ago

AlexChien commented 9 years ago

When I input external website in the browser url in qt wallet, it asks me to unlock my wallet. Does this expose my wallet to external risk especially when the shared blockchain object, or maybe wallet object is shared between windows? Some malicious code hosted on external website might attempt to attack.

clar commented 9 years ago

The wallet lock status checking is in our qt_play module, it is not exposed to outside, so i think it should be safe currently. But after we expose blockchain object, there might be potential risk from malicious website.

clar commented 9 years ago

But I think we can limit the APIs the external website can touch.