Package: caja Version: 1.8.2-3 Severity: wishlist ".desktop" files are currently shown with the image and the title stated in the file. There seems no way to change this behavior and show the real file name.
Although that might have been seen as a user-friendly feature when it was implemented it actually bothers more experienced users (you can find numerous threads with google about this). And it even poses a security threat since one can simple mask a potential hazardous command as something else. There is no way for a user to see that this is just a .desktop file that will be executed when clicked. So for example I could send you an "image" (assuming you're not an experienced user; maybe within a zip file that you'll extract via context menu). You don't even have to set executable rights afterwards. Clicking the file might then just delete all your personal stuff or do something worse (like uploading something via wget). It's exactly the same thing that went wrong with MS Windows except that you could force Windows Explorer to show the real file name including the extension. So using Caja is even more risky then Explorer now. So please add an option to set this behavior. Regarding the security threat I maybe should've declared this as a "serious" bug instead of a "wishlist" item. -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (990, 'testing'), (500, 'testing-updates'), (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages caja depends on: ii caja-common 1.8.2-3 ii desktop-file-utils 0.22-1 ii gvfs 1.22.2-1 ii libatk1.0-0 2.14.0-1 ii libc6 2.19-18 ii libcairo2 1.14.0-2.1 ii libcaja-extension1 1.8.2-3 ii libexempi3 2.2.1-2 ii libexif12 0.6.21-2 ii libfontconfig1 2.11.0-6.3 ii libfreetype6 2.5.2-4 ii libgail18 2.24.25-3 ii libgdk-pixbuf2.0-0 2.31.1-2+b1 ii libglib2.0-0 2.42.1-1 ii libglib2.0-data 2.42.1-1 ii libgtk2.0-0 2.24.25-3 ii libice6 2:1.0.9-1+b1 ii libmate-desktop-2-17 1.8.1+dfsg1-3 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 ii libpangoft2-1.0-0 1.36.8-3 ii libselinux1 2.3-2 ii libsm6 2:1.2.2-1+b1 ii libstartup-notification0 0.12-4 ii libunique-1.0-0 1.1.6-5 ii libx11-6 2:1.6.2-3 ii libxext6 2:1.3.3-1 ii libxml2 2.9.1+dfsg1-5 ii libxrender1 1:0.9.8-1+b1 ii mate-desktop 1.8.1+dfsg1-3 ii shared-mime-info 1.3-1 Versions of packages caja recommends: ii gvfs-backends 1.22.2-1 Versions of packages caja suggests: ii engrampa 1.8.1+dfsg1-1 pn gstreamer0.10-tools <none> pn meld <none> -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
