nextcloud / nextcloud/android

File preview may leak private information

Offen
#17,548 1 Kommentar 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
approved bug
Vorherrschende Sprache
Kotlin
Sterne
5.6k
Forks
2k
Ø Merge
2 T. 18 Std.
Gemergte PRs (30 T.)
92

Beschreibung

### ⚠️ Before posting ⚠️

- [x] This is a **bug**, not a question or an enhancement.
- [x] I've [searched for similar issues](https://github.com/nextcloud/android/issues) and didn't find a duplicate.
- [x] I've written a clear and descriptive title for this issue, not just "Bug" or "Crash".
- [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/).

### Steps to reproduce

1. Have some private images in a folder on your Nextcloud account
2. Open the nextcloud app with a friend watching, to show some less private files
3. The friend gets to see a preview of the private images

### Expected behaviour

While it is overkill, implementing #14967 would allow this issue to be avoided by disabling recommendations entirely.
A better solution (but also more work) would be to allow the user to select folders which should be excluded from recommendations.

### Actual behaviour

The app shows the preview for everyone to see.

### Android version

15

### Device brand and model

Fairphone 5

### Stock or custom OS?

Stock

### Nextcloud android app version

34.1.1

### Nextcloud server version

Nextcloud Hub 26 Winter (AIO)

### Using a reverse proxy?

No

### Android logs

_No response_

### Server error logs

```bash

```

### Additional information

_No response_

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Start by reproducing the issue with private images and inspect the app's recommendations and file-preview flow; issue #14967 is the related reference. Done should prevent private-folder previews from appearing to others while preserving expected recommendations, with the chosen folder-exclusion behavior documented and tested.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
android, kotlin
Bereich
mobile, security
Issue-Typ
Bug
Schwierigkeit
5/5
Geschätzter Aufwand
Über eine Woche
Aktivitätsstatus
Aktiv
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
45/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.