Weird behavior with "auto media preview", possible security issue.

There is a thread currently on here that if you have media preview turned on, automatically downloads a file. Thread is Here.

This could be a huge security issue because if a bad actor put a payload in a file that just auto downloads, some people might just open it not knowing what it is.

Not sure where to post bugs, so I figured this might be the place for now.

8 points · 3 comments · view on lemmy.world

3 Comments

cacheson@kbin.social · 3 pts · 3y

Created a bug report for this: https://codeberg.org/Kbin/kbin-core/issues/446

shatteredsteel@kbin.social · 1 pts · 3y

I was taking a look at the same issue earlier in another thread.

Both of the issues are from CBS news.

Was yours trying to download a playlist file as well?

Edit to add link to previous issue:

https://kbin.social/m/kbinMeta/t/77143/I-keep-getting-this-m3u8-download-whenever-I-open-the