New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
URL in the external link warning window #2965
Comments
I'm not fully sure by reading this ticket I understand what this is about. But it seems this is about what happen with clicking on an external link. A warning is displayed that the user will leave the Kiwix application but the URL is is not given. This seems to be unoptimal from a security perspective. Having the URL displayed will help the Kiwix user to decide if he wants to continue or not. If I understand properly this is a different topic of #2966 That said, it has to be smart IMO, so the URL can be readable (not too long). |
Yes. Sorry for not being as clear, I copied this at the top of the issue.
Yes. 2966 could also potentially be approached in such a way that the external link warning window's implementation changes, but it is another topic (copying the URL into the clipboard vs displaying the URL on-screen). |
I think even showing the domain name would be more than enough to help the Kiwix user to decide if the user wants to continue or not, we can have a link with ellipsis text alongside copy button. What do you think? 🤔 @kelson42 @gouri-panda |
@cdhiraj40 Good idea! We can further reduce size by replacing copy text with copy icon. As @kelson42 mentioned the url should readable as much possible. |
Size can be further reduced if the |
Is this issue still relevant? the app still does not show the URL when warning the user about an external link... |
@gouri-panda @shankarpriyank what are exactly the changes you propose to implement? |
@kelson42 We should display the external link in the warning window and a copy button is a good idea too. |
OK, good to me. |
Is your feature request related to a problem? Please describe.
(Edit - I copy @kelson42's clearer and shorter version here at the top)
When clicking on an external link, a warning is displayed that the user will leave the Kiwix application, but the URL is is not given. This is unoptimal from a security perspective. Having the URL displayed will help the Kiwix user to decide if he wants to continue or not.
(Original report)
If the warning window is enabled, it might as well display the URL, or at least the domain, to double-check with a quick glance. While the bigger WMF wikis do not have a real issue with malicious links, wikis with smaller communities and third-party content could be easier to use as an attack vector.
For example, most links in a Wiktionary point to a couple well-known online dictionaries used as sources. On Wikipedia, one could check that the destination is a reputable official source or newspaper, or at least that the name "sounds like" the source declared in the link label.
Describe the solution you'd like
Display the URL, or the domain, or a shortened URL version with at least the domain.
The text was updated successfully, but these errors were encountered: