portable version could prevent to store recent-file

Bug #2043886 reported by Huw Kirk
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
HomeBank
Fix Released
Low
Maxime DOYEN

Bug Description

Hi,

Sadly the portable Windows-version is not completely portable.
It creates a file "recently-used.xbel" within the current user's AppData\Local-directory which does contain all recently opened documents!

This should be fixed (maybe move it to .\config?), because users certainly do not expect to leave traces about their financial documents everywhere where they did look into them!

It's kind of a security vulnerability, but no actual data is spread (despite the information where you are storing it), so I'll not set the checkbox. - Feel free to change this if necessary.

Revision history for this message
Maxime DOYEN (mdoyen) wrote (last edit ): Re: portable version should prevent to store recent-file

This file is a standard gtk file to store recent file.
It does not make the app not portable, nor it is any kind of vulnerability, leaving a path don't give you access to the data itself, even on a cloud.
On windows OS (an others) there is also a native last opened file list stored into the local disk.

internal note: we could set gtk setting: gtk-recent-files-enabled=false

summary: - Portable windows version is not portable
+ portable version should prevent to store recent-file
Maxime DOYEN (mdoyen)
summary: - portable version should prevent to store recent-file
+ portable version could prevent to store recent-file
Maxime DOYEN (mdoyen)
Changed in homebank:
milestone: none → 5.7.3
Maxime DOYEN (mdoyen)
Changed in homebank:
assignee: nobody → Maxime DOYEN (mdoyen)
importance: Undecided → Low
status: New → Fix Committed
Maxime DOYEN (mdoyen)
Changed in homebank:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.