File preview may leak private information
- Lingua principale
- Kotlin
- Stelle
- 5.6k
- Fork
- 2k
- Merge medio
- 2g 20h
- PR unite (30g)
- 105
Descrizione
### ⚠️ Before posting ⚠️
- [x] This is a **bug**, not a question or an enhancement.
- [x] I've [searched for similar issues](https://github.com/nextcloud/android/issues) and didn't find a duplicate.
- [x] I've written a clear and descriptive title for this issue, not just "Bug" or "Crash".
- [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/).
### Steps to reproduce
1. Have some private images in a folder on your Nextcloud account
2. Open the nextcloud app with a friend watching, to show some less private files
3. The friend gets to see a preview of the private images
### Expected behaviour
While it is overkill, implementing #14967 would allow this issue to be avoided by disabling recommendations entirely.
A better solution (but also more work) would be to allow the user to select folders which should be excluded from recommendations.
### Actual behaviour
The app shows the preview for everyone to see.
### Android version
15
### Device brand and model
Fairphone 5
### Stock or custom OS?
Stock
### Nextcloud android app version
34.1.1
### Nextcloud server version
Nextcloud Hub 26 Winter (AIO)
### Using a reverse proxy?
No
### Android logs
_No response_
### Server error logs
```bash
```
### Additional information
_No response_
Guida per i contributori
Apri la guida per i contributori
Direzione di ricerca
Start by reproducing the issue with private images and inspect the app's recommendations and file-preview flow; issue #14967 is the related reference. Done should prevent private-folder previews from appearing to others while preserving expected recommendations, with the chosen folder-exclusion behavior documented and tested.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Valutazione
- Stack tecnologico
- android, kotlin
- Ambito
- mobile, security
- Tipo di issue
- Bug
- Difficoltà
- 5/5
- Tempo stimato
- Più di una settimana
- Stato di attività
- Attiva
- Chiarezza
- Abbastanza chiara
- Idoneità per principianti
- 45/100