<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - URL to folder / directory no longer working in LO 6.2.4.2 for Mac"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=125607#c3">Comment # 3</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - URL to folder / directory no longer working in LO 6.2.4.2 for Mac"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=125607">bug 125607</a>
from <span class="vcard"><a class="email" href="mailto:sbergman@redhat.com" title="Stephan Bergmann <sbergman@redhat.com>"> <span class="fn">Stephan Bergmann</span></a>
</span></b>
<pre>That commit is part of a security fix, to prevent that clicking on hyperlinks
executes arbitrary applications, which may surprise the user (who assumes that
clicking on a hyperlink will open the browser, and as such not execute
unexpected code on their machine). On macOS, applications are stored as
directories (of a certain structure) in the file system, which is why this
commit blocks opening directories (including those not representing
applications, as something one could consider as "collateral damage"). As I
wrote on our closed security list, "I don't think we are taking away reasonable
functionality when also blocking any other sort of non-regular file".
Thomas, what is your use case of having hyperlinks to folders in documents?
One detail that was caused by this being a security fix is that the "is not an
absolute URL" error message is wrong. I can probably fix that part, even if
overall I would prefer to close this bug as WONTFIX.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>