Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 54e32332750c from chromium #35273

Merged
merged 6 commits into from Aug 16, 2022

Conversation

ppontes
Copy link
Member

@ppontes ppontes commented Aug 9, 2022

[Merge 104] Sanitize default file name in windows select file dialog

On windows, '%' is a special character and can be used for environment
variables. So if the default file name is '%DATADIR%', it can actually
refer to another directory and thus causing weird behaviors.
And '%' cannot be escaped when used in the file dialog. Both "^%" and
"%%" don't work. This CL mitigates the issue by replacing '%' with '_'.
This only affects the default file name when showing the dialog. Power
users can still change the file name by adding '%' if needed.

BUG=1308422

(cherry picked from commit 9cdce354cb3b0da5b4b311638973d407be7712b6)

Change-Id: Ibb275f5c3c2c9458c20d1e97ad527f7c95184eaa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3688608
Reviewed-by: Robert Liao robliao@chromium.org
Commit-Queue: Min Qin qinmin@chromium.org
Cr-Original-Commit-Position: refs/heads/main@{#1014602}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3758469
Cr-Commit-Position: refs/branch-heads/5112@{#822}
Cr-Branched-From: b13d3fe7b3c47a56354ef54b221008afa754412e-refs/heads/main@{#1012729}

Notes: Security: backported fix for CVE-2022-2618.

@ppontes ppontes requested review from a team as code owners August 9, 2022 00:02
@ppontes ppontes added 19-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Aug 9, 2022
@electron-cation electron-cation bot added new-pr 🌱 PR opened in the last 24 hours and removed new-pr 🌱 PR opened in the last 24 hours labels Aug 9, 2022
@jkleinsc jkleinsc merged commit e8fa8fd into 19-x-y Aug 16, 2022
@jkleinsc jkleinsc deleted the cherry-pick/19-x-y/chromium/54e32332750c branch August 16, 2022 21:03
@release-clerk
Copy link

release-clerk bot commented Aug 16, 2022

Release Notes Persisted

Security: backported fix for CVE-2022-2618.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
19-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants