You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by ar...@apache.org on 2021/06/01 17:41:06 UTC
[openoffice] branch bug128453 created (now af31ee4)
This is an automated email from the ASF dual-hosted git repository.
ardovm pushed a change to branch bug128453
in repository https://gitbox.apache.org/repos/asf/openoffice.git.
at af31ee4 Update list of safe extensions
This branch includes the following new commits:
new 41de044 Consider the file:// protocol safe
new af31ee4 Update list of safe extensions
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[openoffice] 01/02: Consider the file:// protocol safe
Posted by ar...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ardovm pushed a commit to branch bug128453
in repository https://gitbox.apache.org/repos/asf/openoffice.git
commit 41de044fac77c3c8feaa2b33a869dfe43608fe40
Author: Arrigo Marchiori <ar...@yahoo.it>
AuthorDate: Tue Jun 1 19:39:10 2021 +0200
Consider the file:// protocol safe
The safety of file:// links is based on file extensions.
---
main/sfx2/source/appl/appopen.cxx | 2 ++
1 file changed, 2 insertions(+)
diff --git a/main/sfx2/source/appl/appopen.cxx b/main/sfx2/source/appl/appopen.cxx
index 44c3000..ee68ab7 100644
--- a/main/sfx2/source/appl/appopen.cxx
+++ b/main/sfx2/source/appl/appopen.cxx
@@ -947,9 +947,11 @@ void SfxApplication::OpenDocExec_Impl( SfxRequest& rReq )
case INET_PROT_HTTP:
case INET_PROT_HTTPS:
bSafeExtension = true; // trust the browser to prevent unsafe extensions
+ // Fall-through
// case INET_PROT_FTP:
case INET_PROT_VND_SUN_STAR_HELP:
case INET_PROT_MAILTO:
+ case INET_PROT_FILE:
bUnsafeProtocol = false;
break;
default: // Anything else, including INET_PROT_FILE
[openoffice] 02/02: Update list of safe extensions
Posted by ar...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ardovm pushed a commit to branch bug128453
in repository https://gitbox.apache.org/repos/asf/openoffice.git
commit af31ee45ce2d3d3ac62ed0ea606bfd14e39d43b1
Author: Arrigo Marchiori <ar...@yahoo.it>
AuthorDate: Tue Jun 1 19:39:49 2021 +0200
Update list of safe extensions
They should be all the extensions that AOO can open at the moment
---
.../data/org/openoffice/Office/Security.xcu | 270 +++++++++++++++++++++
1 file changed, 270 insertions(+)
diff --git a/main/officecfg/registry/data/org/openoffice/Office/Security.xcu b/main/officecfg/registry/data/org/openoffice/Office/Security.xcu
index 67021a9..45e9c20 100644
--- a/main/officecfg/registry/data/org/openoffice/Office/Security.xcu
+++ b/main/officecfg/registry/data/org/openoffice/Office/Security.xcu
@@ -469,6 +469,276 @@
<value>xhp</value>
</prop>
</node>
+ <node oor:name="m90" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xhp</value>
+ </prop>
+ </node>
+ <node oor:name="m91" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odt</value>
+ </prop>
+ </node>
+ <node oor:name="m92" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>ott</value>
+ </prop>
+ </node>
+ <node oor:name="m93" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pdb</value>
+ </prop>
+ </node>
+ <node oor:name="m94" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>docx</value>
+ </prop>
+ </node>
+ <node oor:name="m95" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>docm</value>
+ </prop>
+ </node>
+ <node oor:name="m96" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>dotx</value>
+ </prop>
+ </node>
+ <node oor:name="m97" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>dotm</value>
+ </prop>
+ </node>
+ <node oor:name="m98" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>uot</value>
+ </prop>
+ </node>
+ <node oor:name="m99" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>psw</value>
+ </prop>
+ </node>
+ <node oor:name="m100" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>602</value>
+ </prop>
+ </node>
+ <node oor:name="m101" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>uof</value>
+ </prop>
+ </node>
+ <node oor:name="m102" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>ods</value>
+ </prop>
+ </node>
+ <node oor:name="m103" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>ots</value>
+ </prop>
+ </node>
+ <node oor:name="m104" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xlc</value>
+ </prop>
+ </node>
+ <node oor:name="m105" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xlm</value>
+ </prop>
+ </node>
+ <node oor:name="m106" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>slk</value>
+ </prop>
+ </node>
+ <node oor:name="m107" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xlsb</value>
+ </prop>
+ </node>
+ <node oor:name="m108" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xlsm</value>
+ </prop>
+ </node>
+ <node oor:name="m109" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xlsx</value>
+ </prop>
+ </node>
+ <node oor:name="m110" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xltm</value>
+ </prop>
+ </node>
+ <node oor:name="m111" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>xltx</value>
+ </prop>
+ </node>
+ <node oor:name="m112" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>wk1</value>
+ </prop>
+ </node>
+ <node oor:name="m113" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>wks</value>
+ </prop>
+ </node>
+ <node oor:name="m114" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>123</value>
+ </prop>
+ </node>
+ <node oor:name="m115" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>uos</value>
+ </prop>
+ </node>
+ <node oor:name="m116" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pxl</value>
+ </prop>
+ </node>
+ <node oor:name="m117" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>wb2</value>
+ </prop>
+ </node>
+ <node oor:name="m118" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odp</value>
+ </prop>
+ </node>
+ <node oor:name="m119" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>otp</value>
+ </prop>
+ </node>
+ <node oor:name="m120" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pps</value>
+ </prop>
+ </node>
+ <node oor:name="m121" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pptm</value>
+ </prop>
+ </node>
+ <node oor:name="m122" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pptx</value>
+ </prop>
+ </node>
+ <node oor:name="m123" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>potm</value>
+ </prop>
+ </node>
+ <node oor:name="m124" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>potx</value>
+ </prop>
+ </node>
+ <node oor:name="m125" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>uop</value>
+ </prop>
+ </node>
+ <node oor:name="m126" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odg</value>
+ </prop>
+ </node>
+ <node oor:name="m127" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>otg</value>
+ </prop>
+ </node>
+ <node oor:name="m128" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>pict</value>
+ </prop>
+ </node>
+ <node oor:name="m129" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>sgf</value>
+ </prop>
+ </node>
+ <node oor:name="m130" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>sgv</value>
+ </prop>
+ </node>
+ <node oor:name="m131" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>svm</value>
+ </prop>
+ </node>
+ <node oor:name="m132" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>dib</value>
+ </prop>
+ </node>
+ <node oor:name="m133" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>jpeg</value>
+ </prop>
+ </node>
+ <node oor:name="m134" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>jfif</value>
+ </prop>
+ </node>
+ <node oor:name="m135" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>jif</value>
+ </prop>
+ </node>
+ <node oor:name="m136" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>jpe</value>
+ </prop>
+ </node>
+ <node oor:name="m137" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>svg</value>
+ </prop>
+ </node>
+ <node oor:name="m138" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>tiff</value>
+ </prop>
+ </node>
+ <node oor:name="m139" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>oth</value>
+ </prop>
+ </node>
+ <node oor:name="m140" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odm</value>
+ </prop>
+ </node>
+ <node oor:name="m141" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odb</value>
+ </prop>
+ </node>
+ <node oor:name="m142" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>odf</value>
+ </prop>
+ </node>
+ <node oor:name="m143" oor:op="replace">
+ <prop oor:name="Extension" oor:type="xs:string">
+ <value>mml</value>
+ </prop>
+ </node>
</node>
<node oor:name="Hyperlinks">
<prop oor:name="Open" oor:type="xs:int">