Bug 452470

Summary:	Dolphin's Share to Imgur should ask for confirmation
Product:	[Frameworks and Libraries] frameworks-purpose	Reporter:	Matt <mattyhoffman7>
Component:	general	Assignee:	Aleix Pol <aleixpol>
Status:	CONFIRMED ---
Severity:	normal	CC:	dev.bacteriostat, kfm-devel, nunuu
Priority:	NOR
Version:	5.110.0
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Matt 2022-04-10 13:33:31 UTC

SUMMARY
When using Dolphin snapped to the right hand side of my screen, in the context menu for a picture containing sensitive information that was on the far right hand side I misclicked on the share to imgur context menu as it popped up on top of the existing context menu (to be clear this report isn't about the overlapping context menus as this is expected behaviour).

Without asking for confirmation Dolphin immediately uploaded this to imgur. Dolphin should probably ask for confirmation before doing this so accidents like that are harder to produce. Thank you to whoever added the delete link into the popup notification though :)


STEPS TO REPRODUCE
1. Right click on an image in dolphin
2. Go to the share submenu
3. Press share to Imgur

OBSERVED RESULT
Dolphin immediately uploads the image to Imgur

EXPECTED RESULT
Dolphin should probably ask for confirmation before doing so, and warn the user the image will be made public

SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 5.24.3
KDE Frameworks Version: 5.92.0
Qt Version: 5.15.3
Kernel Version: 5.16.16-arch1-1 (64-bit)
Graphics Platform: Wayland
Processors: 8 × Intel® Core™ i7-4770K CPU @ 3.50GHz
Memory: 19.5 GiB of RAM
Graphics Processor: AMD Radeon RX 6900 XT

ADDITIONAL INFORMATION

Comment 1 nunuu 2024-04-07 00:27:51 UTC

Bug still exists (as of purpose 5.110) and this should frankly be higher priority. It actually concerns the "Purpose" framework used in multiple KDE applications to provide share functionality.

Additionally to the concern already mentioned, imgur has a TOS and privacy policy that the user needs to accept before using the service, which the problematic option completely bypasses. I'm no expert, but that sounds like a major legal issue.

Comment 2 Bacteria 2024-08-21 04:53:00 UTC

This should be higher priority. Also the link to delete should also be put somewhere permanent where the user can access it easily instead of the notification which can be cleared.