https://bugs.documentfoundation.org/show_bug.cgi?id=162821
Bug ID: 162821
Summary: steals the PRIMARY selection when a text search is
active
Product: LibreOffice
Version: 24.2.5.2 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: UI
Assignee: [email protected]
Reporter: [email protected]
Under Debian / X11 + FVWM, with LibreOffice 24.2.6.2 (this version is not
available in the "Version" Bugzilla menu, so I've chosen 24.2.5.2 there):
LibreOffice (Writer, Calc, Draw...) steals the PRIMARY selection when a search
is active, just when the mouse happens to move over the LibreOffice window. The
PRIMARY selection should be changed only when the user selects something, not
by just moving the mouse!
There are possible security implications: if the search text contains private
data, and the PRIMARY selection is pasted in a web browser, such private data
may be sent to some remote site. Note that the user does not necessarily know
that the PRIMARY selection has been stolen. So what he pastes may not be what
he thinks.
To reproduce:
1. Start LibreOffice Writer (or Calc, Draw...).
2. Type Ctrl-F to start a search.
3. Type some text to search (a single character is sufficient).
4. Select some text in another application, e.g. xterm.
5. Move the cursor over the LibreOffice window so that this window gets the
focus.
Result: The text in the LibreOffice search field automatically gets selected.
Moreover it becomes the new PRIMARY selection; this can be seen by pasting the
PRIMARY selection somewhere else (with the middle button).
Note that with xterm, xterm unhighlight its selected text when the PRIMARY
selection has changed, so it's easier to see the issue.
Bug also reported in the Debian BTS:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1080978
--
You are receiving this mail because:
You are the assignee for the bug.