nextcloud / nextcloud/android

File preview may leak private information

Aperta
#17,548 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
approved bug
Lingua principale
Kotlin
Stelle
5.6k
Fork
2k
Merge medio
2g 20h
PR unite (30g)
105

Descrizione

### ⚠️ Before posting ⚠️

- [x] This is a **bug**, not a question or an enhancement.
- [x] I've [searched for similar issues](https://github.com/nextcloud/android/issues) and didn't find a duplicate.
- [x] I've written a clear and descriptive title for this issue, not just "Bug" or "Crash".
- [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/).

### Steps to reproduce

1. Have some private images in a folder on your Nextcloud account
2. Open the nextcloud app with a friend watching, to show some less private files
3. The friend gets to see a preview of the private images

### Expected behaviour

While it is overkill, implementing #14967 would allow this issue to be avoided by disabling recommendations entirely.
A better solution (but also more work) would be to allow the user to select folders which should be excluded from recommendations.

### Actual behaviour

The app shows the preview for everyone to see.

### Android version

15

### Device brand and model

Fairphone 5

### Stock or custom OS?

Stock

### Nextcloud android app version

34.1.1

### Nextcloud server version

Nextcloud Hub 26 Winter (AIO)

### Using a reverse proxy?

No

### Android logs

_No response_

### Server error logs

```bash

```

### Additional information

_No response_

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Start by reproducing the issue with private images and inspect the app's recommendations and file-preview flow; issue #14967 is the related reference. Done should prevent private-folder previews from appearing to others while preserving expected recommendations, with the chosen folder-exclusion behavior documented and tested.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
android, kotlin
Ambito
mobile, security
Tipo di issue
Bug
Difficoltà
5/5
Tempo stimato
Più di una settimana
Stato di attività
Attiva
Chiarezza
Abbastanza chiara
Idoneità per principianti
45/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.