https://bugs.kde.org/show_bug.cgi?id=507598
Bug ID: 507598
Summary: xdg-desktop-portal-kde save dialog ignores activity
off-the-record setting
Classification: Plasma
Product: xdg-desktop-portal-kde
Version First 6.4.3
Reported In:
Platform: NixOS
OS: Linux
Status: REPORTED
Severity: major
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: ---
SUMMARY
Hi, I don't use the "recent whatever" feature. It just causes me trouble
because an open or save dialog now pings some SFTP ressource which I accessed
in the past and tries to unlock my SSH key for nothing. Just closing the
passphrase dialog isn't working because KIO or something instructing KIO seems
to have no concept of fail counters. It will happily ask you until you finally
enter your passphrase. It's not optional at this point. KIO wants, KIO gets.
But back to this bug here...
My cheap solution was to disable any file or places history as I don't need
such things. Turns out switching of the "Tracking file and app use" setting of
the current activity is not honored by the File Dialog when started through
chromium. The dialog won't show you recent files and locations anymore but
still saves (and pings them), which is a privacy issue. Therefor severity
major.
STEPS TO REPRODUCE
1. Configure your current Activity to not track file and app use.
2. Start ungoogled-chromium or some other program using the xdg-portal for file
dialogs.
3. Trigger a save dialog and save a file to /tmp/porn.html
OBSERVED RESULT
Find /tmp/porn.html inside this file:
~/.local/state/xdg-desktop-portal-kdestaterc
EXPECTED RESULT
Tracking should be disabled because I opted-out of what should be an opt-in
feature.
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: latest
KDE Plasma Version: latest
KDE Frameworks Version: latest
Qt Version: latest
ADDITIONAL INFORMATION
--
You are receiving this mail because:
You are watching all bug changes.
