New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add note about CHM security issues #3446

Closed
nepix32 opened this Issue Sep 1, 2014 · 3 comments

Comments

Projects
None yet
5 participants
@nepix32
Copy link
Contributor

nepix32 commented Sep 1, 2014

Thankfully CHM generation was added back to mpl 1.4.0. However, the file downloaded from matplotlib download page does not display properly on a Win7/32 bit machine with IE 10.
When downloading to a local directory and opening it (double-clicking), the HTML pane to the right remains blank. The Index/TOC pane to the left works normally (File can be searched). The same machine can open CHM files generated by Sphinx 1.2.2 and the default theme without any issues.

Workaround for me was to use an alternative CHM-Viewer (e. g. SumatraPDF).

@tacaswell tacaswell added MS labels Sep 1, 2014

@tacaswell tacaswell added this to the v1.4.x milestone Sep 1, 2014

@cgohlke

This comment has been minimized.

Copy link
Contributor

cgohlke commented Dec 4, 2014

This is very likely due to a security feature of Windows because the file comes from an untrusted location: the Internet. In case you get a "Open File - Security Warning" dialog box when opening the CHM file, uncheck the "Always ask before opening this file" box. If not, right click on the CHM file and select "Properties" and then "Unblock".

@nepix32

This comment has been minimized.

Copy link
Contributor

nepix32 commented Dec 4, 2014

Right-clicking the .CHM-file/"Properties"/Tab "General" and clicking button "Unblock" did the trick.
chm_unblock

I was aware of the first problem (e. g. when opening a .CHM file from a UNC-share), but in this case you get the security warning. I was not aware that Windows blocks the content of a .CHM-file downloaded directly from the web to local disk without issuing any warning/note.

Issue resolved, thanks (maybe add a note to the download link?)

@tacaswell tacaswell modified the milestones: 1.5.0, v1.4.x Feb 7, 2015

@tacaswell tacaswell changed the title CHM-Help for 1.4.0 does not display properly Add note about CHM security issues Feb 7, 2015

@tacaswell tacaswell modified the milestones: proposed next point release, next point release Jul 17, 2015

@tacaswell tacaswell modified the milestones: 2.1 (next point release), 2.2 (next next feature release) Oct 3, 2017

@QuLogic

This comment has been minimized.

Copy link
Member

QuLogic commented Feb 9, 2018

It doesn't appear that CHM files have been produced since 1.5.1.

@QuLogic QuLogic closed this Feb 9, 2018

@QuLogic QuLogic modified the milestones: v2.2, unassigned Feb 9, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment