I may have overlooked this but is there a way to disable (the effect of) the Unicode RTLO (right-to-left override) character in filenames displayed by XY?
This is an old security issue in Windows and now I tested again and XY displays a file like test[RTLO_char]txt.bat as testtab.txt which can lead to unpredictable results if such files downloaded from the internet and even experienced users could be tricked into double clicking it.
Color-coding executable (bat, exe, scr etc.) files is not always enough of a (kind of) protection.
Moreover for locales where the default is Left to Right, this should be by default, especially in filenames.
A way to block RTLO in filenames
-
admin
- Site Admin
- Posts: 66634
- Joined: 22 May 2004 16:48
- Location: Win8.1, Win10, Win11, all @100%
- Contact:
Re: A way to block RTLO in filenames
Sure, tick this:
Configuration | Menus, Mouse, Safety | Safety Belts | Directional formatting codes protection
To my knowledge XY is still the only file manager that offers this protection.
Configuration | Menus, Mouse, Safety | Safety Belts | Directional formatting codes protection
To my knowledge XY is still the only file manager that offers this protection.
FAQ | XY News RSS | XY X
-
tedy
- Posts: 323
- Joined: 17 Jun 2009 21:48
Re: A way to block RTLO in filenames
Wow. I should have been more thorough inspecting the options. Now I remember I read about this here somwhere few years ago.
Such exploit would be very easy to trick all kind of users.. and I don't use antivirus'es
.
WExplorer (and all other file managers) are indeed very dangerous allowing this "feature" for filenames.. frightening.
Such exploit would be very easy to trick all kind of users.. and I don't use antivirus'es
WExplorer (and all other file managers) are indeed very dangerous allowing this "feature" for filenames.. frightening.
XYplorer Beta Club