Bug 169397 - Endless loop when macro security dialog is closed and SecureURL setting is locked down
Summary: Endless loop when macro security dialog is closed and SecureURL setting is lo...
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
26.2.0.0 alpha0+ master
Hardware: All All
: medium normal
Assignee: Gabor Kelemen (Collabora)
URL:
Whiteboard: target:26.2.0 target:25.8.4
Keywords:
Depends on:
Blocks: UI-Lockdown
  Show dependency treegraph
 
Reported: 2025-11-12 09:55 UTC by Gabor Kelemen (Collabora)
Modified: 2025-11-13 16:13 UTC (History)
0 users

See Also:
Crash report or crash signature:


Attachments
Example central config snippet (621 bytes, application/xml)
2025-11-12 09:55 UTC, Gabor Kelemen (Collabora)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gabor Kelemen (Collabora) 2025-11-12 09:55:31 UTC
Created attachment 203890 [details]
Example central config snippet

Attached minimal central configuration snippet locks down the org.openoffice.Office.Common/Security/Scripting/SecureURL config property.
When the Macro Security dialog is closed, this causes LO to fall into an endless loop.

1. Save attached config snippet to instdir/share/registry/
2. Start LO, go to Extras - Options - Security
3. Press the Macro Security button to open the Macro Security dialog
4. On the Trusted Sources tab, see that the Trusted File Locations list has an entry and it is locked down
4. Press OK on the dialog to close it
-> Endless loop

Version: 26.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 1ac14eb0fa8fe80b5b3afd89311bf44241a86138
CPU threads: 8; OS: Linux 6.8; UI render: default; VCL: gtk3
Locale: hu-HU (hu_HU.UTF-8); UI: en-US
Calc: threaded
Comment 1 Commit Notification 2025-11-12 13:52:17 UTC
Gabor Kelemen committed a patch related to this issue.
It has been pushed to "master":

https://git.libreoffice.org/core/commit/a0b1ef4836ba9982e64420a33000de9877c8d600

tdf#169397 Don't crash if SecureURL setting is locked down

It will be available in 26.2.0.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.
Comment 2 Commit Notification 2025-11-13 16:12:30 UTC
Gabor Kelemen committed a patch related to this issue.
It has been pushed to "libreoffice-25-8":

https://git.libreoffice.org/core/commit/05c99d105b3560822fa14d04849ab23553142670

tdf#169397 Don't crash if SecureURL setting is locked down

It will be available in 25.8.4.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.