Skip to content

Revert "thumbnails: keep the orignal file name"

Bastien Nocera requested to merge wip/hadess/revert-filename-leak into master

This reverts commit e7006be2.

Passing the filename to an untrusted thumbnailer is a potential information leak, or a possible method to get that thumbnailer to crash.

The Flatpak sandboxing codepaths unfortunately cannot remap files, so that's the reason why the original filename is passed.

Merge request reports