Bug 260677

Version:           4.5.4 (using KDE 4.5.4) 
OS:                Linux

Suppose you have the following filename:

<U+202E>txt.windows_virus.exe

(<U+202E> is the unicode character that overrides text direction to be right-to-left.) Konqueror will display this filename as:

exe.suriv_swodniw.txt

If the desktop environment and/or WINE and/or the distribution's package manager automatically creates a MIME entry for windows executables (most do), double-clicking this file (which appears to have a .txt extension) will run it in WINE.

Note that WINE will run files even if they do not have execute permission set, so a file could be downloaded and opened by a user expecting a .txt file.

Mitigated somewhat by the fact that a .exe file has a different icon from a .txt file.

Proposed resolution:
A file manager should ignore text direction override characters in filenames.

Reproducible: Always

Steps to Reproduce:
Create a filename with a RTL override character in it (called RLO or <U+202E>).

Actual Results:  
Konqueror displays the filename with its text reversed. It appears to have the reversed text as its name (and its initial characters as its extension), and there is no indication that it contains a text direction override character.

Expected Results:  
Konqueror should either make it clear to the user that the text of this filename is actually reversed, or it should ignore the override character (perhaps displaying it as a box).

The original report comes from the AVG antivirus blog about a similar problem in Windows:

http://viruslab.blog.avg.com/2010/12/directly-executable-txt-yes.html