Opened 9 years ago

Closed 8 years ago

#263 closed defect (fixed)

Do not create thumbnail for encrypted PDF

Reported by: Lewis Rosenthal Owned by: Gregg Young
Priority: major Milestone: 1.4.0
Component: Lucide Core Version: 1.3
Keywords: Cc:

Description

We should not create thumbnails for password-protected (encrypted) documents, as this is a potential security risk (thumbnail could be viewed by anything, unencrypted).

Alternatively, encrypt the thumbnail data somehow, so that it may only be decrypted with the original password for the document itself.

Change History (8)

comment:1 by Matthias Waltenberger, 9 years ago

Owner: set to Matthias Waltenberger

comment:2 by Lewis Rosenthal, 8 years ago

Matthias, any more thoughts on this one? The last test you sent me was still creating these, and these thumbnails are viewable outside of the program and from the FOC within Lucide, as well, before the password dialog is raised.

Related to #267

comment:3 by Gregg Young, 8 years ago

Milestone: → Future

comment:4 by Gregg Young, 8 years ago

Owner: changed from Matthias Waltenberger to Gregg Young
Status: new → assigned

comment:5 by Gregg Young, 8 years ago

Milestone: Future → 1.4.0

comment:6 by Gregg Young, 8 years ago

I believe this is fixed. Any comments?

comment:7 by Lewis Rosenthal, 8 years ago

Really? The build I have (RC2a) just created a thumbnail for a password-protected PDF.

comment:8 by Gregg Young, 8 years ago

Resolution: → fixed
Status: assigned → closed

CS [563]

Note: See TracTickets for help on using tickets.