[Libreoffice-bugs] [Bug 135508] Relative linked text sections should automatically read on document opening

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=135508

Mike Kaganski <mikekaganski at hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #6 from Mike Kaganski <mikekaganski at hotmail.com> ---
(In reply to S.Zosgornik from comment #5)
> This bug-report wasn't about any external data but relative linked documents
> on your own hard-drive.

You seem to not read carefully. Specifically for this case, I explained in
comment 4:

> Absolutely. The request is out of question, because automatically reading an
> external document (even local one) may lead to all kinds of security/privacy
> issues, think about documents with URLs to sites that track your IP; the
> link in fact could be in the document near the main one, if you received
> several malicious documents in a ZIP, so links to local files are not safe.

To emphasize the relevant parts:

*even local one*
*the link in fact could be in the document near the main one*

So no, silencing only relatively-referenced local documents is not an option,
since it is no less dangerous.

Closing WONTFIX again. Please do not reopen, unless you have a good proposal
that addresses the security issues.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210111/166c8ab1/attachment.htm>