• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?


  • Subject: Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
  • From: Charles Srstka <email@hidden>
  • Date: Fri, 24 Jun 2016 18:24:43 -0500

> On Jun 24, 2016, at 3:54 PM, Quincey Morris <email@hidden> wrote:
>
> 1. [Security] Being able to select an arbitrary file programmatically might lead to spearphishing exploits, where the user is tricked into opening a file that is otherwise inaccessible from code in the sandbox.

How could this be a security threat, when a malicious program could just set canChooseDirectories to true, open the panel to the app’s parent directory, and spearphish the user into clicking OK on that?

Making it not work with app bundles doesn’t seem to introduce any loopholes that aren’t there already.

Charles

_______________________________________________

Cocoa-dev mailing list (email@hidden)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden


  • Follow-Ups:
    • Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
      • From: Quincey Morris <email@hidden>
    • Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
      • From: Charles Srstka <email@hidden>
References: 
 >How to pre-select a file in NSOpenPanel -- specifically, a .app bundle? (From: Andy Lee <email@hidden>)
 >Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle? (From: Quincey Morris <email@hidden>)

  • Prev by Date: Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
  • Next by Date: Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
  • Previous by thread: Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
  • Next by thread: Re: How to pre-select a file in NSOpenPanel -- specifically, a .app bundle?
  • Index(es):
    • Date
    • Thread