Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

desktop: Change default value of Open Links to "Ask" #17690

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

oadq
Copy link
Contributor

@oadq oadq commented Aug 28, 2024

Change the default value of the "Open Links" setting from "Allow" to "Ask".
Having the default value of "Allow" may raise security concerns.

More details are in issue #17432, which this PR resolves.

…#17432)

Change the default value of the "Open Links" setting from "Allow" to
"Ask". Having the default value of "Allow" may raise security concerns.
More details are in issue ruffle-rs#17432, which this commit solves.
@n0samu
Copy link
Member

n0samu commented Aug 28, 2024

Because the prompt can become annoying I would prefer to wait until we have a "don't ask again" checkbox in the dialog to do this

@oadq
Copy link
Contributor Author

oadq commented Aug 28, 2024

Because the prompt can become annoying I would prefer to wait until we have a "don't ask again" checkbox in the dialog to do this

I agree, but should the checkbox disable the prompt only for the URL, the SWF, or the entire session?

@Korne127
Copy link
Contributor

On web, @n0samu s main concern was old flash based navigation buttons which shouldn't get a prompt for each click. So on web, the checkbox would need to be for the entire session. On desktop, that's different though as the website doesn't replace the current SWF file, so I'd only make it for the current SWF file (if possible / easy to implement, I think the whole session is okay as well).

@kjarosh kjarosh added the A-desktop Area: Desktop Application label Aug 28, 2024
@danielhjacobs danielhjacobs added security Pull requests that address a security vulnerability T-feature Type: New Feature (that Flash doesn't have) labels Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-desktop Area: Desktop Application security Pull requests that address a security vulnerability T-feature Type: New Feature (that Flash doesn't have)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants