[Libreoffice-ux-advise] [Bug 146386] New: Drop support for FTP

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=146386

            Bug ID: 146386
           Summary: Drop support for FTP
           Product: LibreOffice
           Version: 7.4.0.0 alpha0+ Master
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needsUXEval
          Severity: enhancement
          Priority: medium
         Component: framework
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: kelemeng at ubuntu.com
                CC: libreoffice-ux-advise at lists.freedesktop.org,
                    thb at libreoffice.org

Created attachment 177106
  --> https://bugs.documentfoundation.org/attachment.cgi?id=177106&action=edit
Example file with hyperlink to a public FTP site

Currently creation and opening of FTP hyperlinks is supported in LibreOffice.
Given that this is an inherently insecure protocol, LO should drop support for
it in the Hyperlink dialog and the ucp backend[1] as well.

The ODF standard[2] does not require support of this protocol, so that's not a
concern.

Recently popular browsers stopped supporting the FTP protocol citing security
concerns and low usage of the protocol in browsers [3] [4].

[1] https://cgit.freedesktop.org/libreoffice/core/tree/ucb/source/ucp/ftp
[2] http://docs.oasis-open.org/office/OpenDocument/v1.3/
[3] https://chromestatus.com/feature/6246151319715840
[4]
https://blog.mozilla.org/addons/2021/04/15/built-in-ftp-implementation-to-be-removed-in-firefox-90/

-- 
You are receiving this mail because:
You are on the CC list for the bug.