AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

Include configuration for tax on tips (#7298)

Public commit record

What the developer wrote

Authored by Chukwuleta Tobechi

76/100 · Adequate
Include configuration for tax on tips (#7298)

* Include configuration for tax on tips

* Ensure null and 0 result in no tip tax

* mirroring tax in tip scenario in CanUsePOSKeypad.

* Format tip tax receipt

* Update

* fix coderabbit suggestion

* Include tip tax to report, and remove tax from product information
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit adds a new optional 'tax on tips' feature to BTCPay Server's Point of Sale app. Merchants can now configure a separate tax rate that applies to customer tips, and the receipt/cart display breaks out the tip tax separately from regular item tax. There is no indication this is a security fix; it is a normal business-logic feature addition.

Recommended action

No security action required; review as normal feature code. If auditing, verify that the client-side and server-side totals cannot be desynchronized and that tip tax is consistently rounded.

Security signals we found

01

New user-supplied numeric input (TipTaxRate) is validated with Range(0.0, 100.0) and server-side null/negative checks

02

No injection, authorization, or cryptographic changes observed

03

No vendor disclosure of security relevance

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.