A way to block RTLO in filenames

Please check the FAQ (https://www.xyplorer.com/faq.php) before posting a question...
Post Reply
tedy
Posts: 323
Joined: 17 Jun 2009 21:48

A way to block RTLO in filenames

Post by tedy »

I may have overlooked this but is there a way to disable (the effect of) the Unicode RTLO (right-to-left override) character in filenames displayed by XY?
This is an old security issue in Windows and now I tested again and XY displays a file like test[RTLO_char]txt.bat as testtab.txt which can lead to unpredictable results if such files downloaded from the internet and even experienced users could be tricked into double clicking it.
Color-coding executable (bat, exe, scr etc.) files is not always enough of a (kind of) protection.
Moreover for locales where the default is Left to Right, this should be by default, especially in filenames.

admin
Site Admin
Posts: 66634
Joined: 22 May 2004 16:48
Location: Win8.1, Win10, Win11, all @100%
Contact:

Re: A way to block RTLO in filenames

Post by admin »

Sure, tick this:
Configuration | Menus, Mouse, Safety | Safety Belts | Directional formatting codes protection

To my knowledge XY is still the only file manager that offers this protection.

tedy
Posts: 323
Joined: 17 Jun 2009 21:48

Re: A way to block RTLO in filenames

Post by tedy »

Wow. I should have been more thorough inspecting the options. Now I remember I read about this here somwhere few years ago.
Such exploit would be very easy to trick all kind of users.. and I don't use antivirus'es :) .
WExplorer (and all other file managers) are indeed very dangerous allowing this "feature" for filenames.. frightening.

Post Reply