[Libreoffice-bugs] [Bug 125093] New: Windows: Honor "Zone.Identifier" stream, and open files from restricted zones in read-only mode

bugzilla-daemon at bugs.documentfoundation.org bugzilla-daemon at bugs.documentfoundation.org
Fri May 3 05:59:14 UTC 2019


https://bugs.documentfoundation.org/show_bug.cgi?id=125093

            Bug ID: 125093
           Summary: Windows: Honor "Zone.Identifier" stream, and open
                    files from restricted zones in read-only mode
           Product: LibreOffice
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: enhancement
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: mikekaganski at hotmail.com

There's a "Zone.Identifier" alternate file stream [1], written to downloaded
files by all browsers to indicate that the files come from untrusted location,
and their treatment should be restricted until they are unlocked [2].

The proposal is to honor this data, and offer to open such files in read-only
mode, with macros disabled.

[1]
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fscc/6e3f7352-d11c-4d76-8c39-2516a9df36e8
[2]
http://woshub.com/how-windows-determines-that-the-file-has-been-downloaded-from-the-internet/

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190503/0c76d6ea/attachment.html>


More information about the Libreoffice-bugs mailing list