Opened 4 years ago

Closed 3 years ago

#263 closed defect (fixed)

Do not create thumbnail for encrypted PDF

Reported by: lewisr Owned by: gyoung
Priority: major Milestone: 1.4.0
Component: Lucide Core Version: 1.3
Keywords: Cc:

Description

We should not create thumbnails for password-protected (encrypted) documents, as this is a potential security risk (thumbnail could be viewed by anything, unencrypted).

Alternatively, encrypt the thumbnail data somehow, so that it may only be decrypted with the original password for the document itself.

Change History (8)

comment:1 Changed 3 years ago by matthiasw

  • Owner set to matthiasw

comment:2 Changed 3 years ago by lewisr

Matthias, any more thoughts on this one? The last test you sent me was still creating these, and these thumbnails are viewable outside of the program and from the FOC within Lucide, as well, before the password dialog is raised.

Related to #267

comment:3 Changed 3 years ago by gyoung

  • Milestone set to Future

comment:4 Changed 3 years ago by gyoung

  • Owner changed from matthiasw to gyoung
  • Status changed from new to assigned

comment:5 Changed 3 years ago by gyoung

  • Milestone changed from Future to 1.4.0

comment:6 Changed 3 years ago by gyoung

I believe this is fixed. Any comments?

comment:7 Changed 3 years ago by lewisr

Really? The build I have (RC2a) just created a thumbnail for a password-protected PDF.

comment:8 Changed 3 years ago by gyoung

  • Resolution set to fixed
  • Status changed from assigned to closed

CS [563]

Note: See TracTickets for help on using tickets.