https://bugs.documentfoundation.org/show_bug.cgi?id=158375
Bug ID: 158375
Summary: Ability to disable active content in LibreOffice
Product: LibreOffice
Version: Inherited From OOo
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: enhancement
Priority: medium
Component: framework
Assignee: [email protected]
Reporter: [email protected]
Blocks: 116885
LibreOffice supports several features that are rarely used or have caused
security problems in the past. These functional areas are:
LibreLogo scripts
DDE commands
OLE objects
Macros
It is desirable in security-sensitive environments that these individual
features should be deactivatable, in each case by a new configuration option in
the user interface. Additionally a configuration is to be implemented, which is
displayed in the user interface that blocks all active content. This reduces
the attack surface significantly.
There is already a configuration option for disabling macros, but it is not yet
exposed on the UI, see:
officecfg::Office::Common::Security::Scripting::DisableMacrosExecution
Something similar for the others could be added.
Referenced Bugs:
https://bugs.documentfoundation.org/show_bug.cgi?id=116885
[Bug 116885] [META] Privacy and data security issues
--
You are receiving this mail because:
You are the assignee for the bug.
