Page 1 of 1

A way to block RTLO in filenames

Posted: 09 Nov 2015 19:39
by tedy
I may have overlooked this but is there a way to disable (the effect of) the Unicode RTLO (right-to-left override) character in filenames displayed by XY?
This is an old security issue in Windows and now I tested again and XY displays a file like test[RTLO_char]txt.bat as testtab.txt which can lead to unpredictable results if such files downloaded from the internet and even experienced users could be tricked into double clicking it.
Color-coding executable (bat, exe, scr etc.) files is not always enough of a (kind of) protection.
Moreover for locales where the default is Left to Right, this should be by default, especially in filenames.

Re: A way to block RTLO in filenames

Posted: 09 Nov 2015 20:35
by admin
Sure, tick this:
Configuration | Menus, Mouse, Safety | Safety Belts | Directional formatting codes protection

To my knowledge XY is still the only file manager that offers this protection.

Re: A way to block RTLO in filenames

Posted: 09 Nov 2015 22:02
by tedy
Wow. I should have been more thorough inspecting the options. Now I remember I read about this here somwhere few years ago.
Such exploit would be very easy to trick all kind of users.. and I don't use antivirus'es :) .
WExplorer (and all other file managers) are indeed very dangerous allowing this "feature" for filenames.. frightening.