https://bugs.documentfoundation.org/show_bug.cgi?id=155419

Mike Kaganski <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
             Status|UNCONFIRMED                 |NEW

--- Comment #2 from Mike Kaganski <[email protected]> ---
It is important to use the correct wording.

Google does not tag the files as "malicious files". It detects a code in the
PDF which executes an *arbitrary* action *automatically* when the PDF is
opened, and then informs the user about that fact, telling literally this:

> Google Drive can't scan this file for viruses.
> This file is executable and may harm your computer.

This same warning would appear for *any* executable file, and does not *claim*
that the file is malicious, but warns that it executes something, and they
don't know what.

This is reproducible. And it is unclear, why the *automatic action* is
necessary for the *default* case, when all that we want is to show the very
first page (using the default scale).

So, this issue could be fixed by making the code that adds the action
conditional - not executing in case when the very first page is shown with
default settings. The code is
https://opengrok.libreoffice.org/xref/core/vcl/source/gdi/pdfwriter_impl.cxx?r=7ea34aa6#5305

and the condition could be simply 'm_aContext.InitialPage > 0'.

A separate improvement could be, if the dialog shown some infobar in case of
other settings, which would add the action - to inform the user that "this PDF
will include an OpenAction command, and can be flagged as executable by some
programs".

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to