Open AlexChien opened 9 years ago
The wallet lock status checking is in our qt_play module, it is not exposed to outside, so i think it should be safe currently. But after we expose blockchain object, there might be potential risk from malicious website.
But I think we can limit the APIs the external website can touch.
When I input external website in the browser url in qt wallet, it asks me to unlock my wallet. Does this expose my wallet to external risk especially when the shared blockchain object, or maybe wallet object is shared between windows? Some malicious code hosted on external website might attempt to attack.