Created attachment 88071 [details] demo document with http hyperlink The attached document contains following hyperlink: "http://münchen.de" if exporting this document to pdf the hyperlink is saved as file url, in my case: file:///Users/sj/Downloads/http:%2F%2Fm%C3%BCnchen.de Even if it is not allowed to use special unicode characters within the domain name (punycode should be used instead and so following url would be correct: http://xn--mnchen-3ya.de) the http scheme should not change to a file url exposing some internals of my file system.
Comment on attachment 88071 [details] demo document with http hyperlink Changed mime type
Reproducible with LO 4.0.6 and 4.1.4.0.0+ under Ubuntu 13.04 x86-64 Best regards. JBF
** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present on a currently supported version of LibreOffice (5.0.1 or preferably 5.0.2.2 or later) https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the version of LibreOffice and your operating system, and any changes you see in the bug behavior If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a short comment that includes your version of LibreOffice and Operating System Please DO NOT Update the version field Reply via email (please reply directly on the bug tracker) Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) http://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to "inherited from OOo"; 4b. If the bug was not present in 3.3 - add "regression" to keyword Feel free to come ask questions or to say hello in our QA chat: http://webchat.freenode.net/?channels=libreoffice-qa Thank you for your help! -- The LibreOffice QA Team This NEW Message was generated on: 2015-10-14
Still reproducible with version 5.0.4.0+ under Ubuntu 15.04 x86-64. Added security keyword because this bug show private data about the file system of the machine where the pdf was generated. Security/privacy problem -> severity level set to major Best regards. JBF
Stephan Bergmann committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=a346dfccd7e342d776dd59eb3ed128557e22a1bf tdf#70833: IDNA support when exporing hyperlinks to PDF It will be available in 5.1.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
*** Bug 33596 has been marked as a duplicate of this bug. ***