https://bugs.documentfoundation.org/show_bug.cgi?id=94697

            Bug ID: 94697
           Summary: EDITING [Security]: Password protected section
                    editable from content.xml
           Product: LibreOffice
           Version: 4.2.8.2 release
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Writer
          Assignee: [email protected]
          Reporter: [email protected]

Created attachment 119200
  --> https://bugs.documentfoundation.org/attachment.cgi?id=119200&action=edit
File with password protected section

Problem description:
When a password protected section is created this is manually editable from the
content.xml file.

Steps to reproduce the issue:

-Create a password protected section in Writer.
-Save the file.
-Rename the file .zip
-Open the archive and edit the file content.xml
-insert or modify the "password protected text" between the tags: <text:p
text:style-name="P2"> password protected text </text:p>

Note: Is also possible to deactivate the protection changing the value
text:protected="true" to text:protected="false" 

Current behaviour:
You can visualise and modify the password protected section from  content.xml
file.    

Expected behaviour:
Text editor visualise password protected section hash.

Verified on:
Version: 4.2.8.2
Build ID: 420m0(Build:2)
OS: Ubuntu 14.04.3 LTS 
Arch:X86_64

Version: 5.0.1.2
Build ID: 81898c9f5c0d43f3473ba111d7b351050be20261
OS: Ubuntu 14.04.3 LTS 
Arch:X86_64

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to