Am 05.05.21 um 14:37 schrieb Arrigo Marchiori:
On Wed, May 05, 2021 at 07:08:11AM +0000, Peter Kovacs wrote:
The best approach I believe is to add a whitelist feature as for macro
files.
Users can add then the links they wish to approve.
Do you mean file-based whitelists instead of target-based?
I will try to explain myself better: the current filter on AOO 4.1.10
is target-based, because it is the target of the link that triggers
the warning. Are you suggesting to add a whitelist based on files, for
example "allow any links in documents from this directory"?
If so, would you use the same whitelist as for macros, or would you
introduce another one?
Other ideas that come to my mind at the moment, just for the sake of
this discussion:
1- whitelist individual targets such as ".uno:Reload" and any other
``complaints'' we will received between one release and the next;
2- whitelist all ".uno:" targets (but would this open possible
malicious exploits?)
3- add a generic box "don't ask any more" on the warning window, that
disables _any_ future warnings;
4- add a generic box "don't ask any more" on the warning window, that
disables future warnings for the _protocol of the current link_ (for
example all http:// or ftp:// or uno: links);
5- add a generic box "don't ask any more" on the warning window, that
disables future warnings for the _target of the current link_ (for
example ".uno:Reload" or "http://server.com/document.html";);
6- .... any other ideas worth discussing? ....
A comination of the whitelist (number 1) and a generic box "don't ask
any more" on the warning window, that disables future warnings as long
as AOO is open. So, user is able to get a reminder with a new session /
start of AOO.
We shouldn't do point 3 - 5. IMHO this is against the security level we
want to reach. The user can do this and on the next day it's forgotten
and cannot be reverted.
I don't know how complex this is as saving the also configuration is a
point I don't know how it is done. So, it's just a wish what could be
best for the users.
My 2 ct.
Marcus
On 04.05.21 16:05, k...@kshelton.plus.com wrote:
For some years I've had a Reload button in my Calc document to avoid having to
use the File menu. Just updated to 4.1.10 and now I get a message when pressing
Reload button:
This hyperlink is going to open “.uno:Reload”. Do you want to proceed?
Is there a way of switching off this message please?
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org
