Bug 478653

Summary:	Pastebin sharing should not paste without confirmation
Product:	[Frameworks and Libraries] frameworks-purpose	Reporter:	Frank Steinmetzger <dev+kde>
Component:	general	Assignee:	Aleix Pol <aleixpol>
Status:	CONFIRMED ---
Severity:	normal	CC:	nate
Priority:	NOR	Keywords:	usability
Version First Reported In:	5.113.0
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Frank Steinmetzger 2023-12-17 17:14:47 UTC

SUMMARY
I just read a post in a tech forum where someone set up a KDE environment on a non-techie’s laptop. And he asked how to disable the pastebin item from the Dolphin context menu, because it is a security risk for the user-to-be.

The function itself is not really dangerous of course, but the fact that there is no warning for the uninitiated and no way of confirmation or cancellation is indeed a problem. Also, the “…” in the context menu item suggest that it will open a dialog window. But the window simply posts and then closes immediately.

OBSERVED RESULT
The file is uploaded immediately.

EXPECTED RESULT
There should be a request for confirmation with an appropriate warning that whatever is being shared will be publicly visible for the entire internet and that there is no way to remove the content—which probably only applies to guests without an account.

SOFTWARE/OS VERSIONS
Operating System: Arch Linux 
KDE Plasma Version: 5.27.10
KDE Frameworks Version: 5.113.0
Qt Version: 5.15.11

Comment 1 Nate Graham 2023-12-21 00:24:51 UTC

> Also, the “…” in the context menu item suggest that it will open a dialog window

That's definitely something simple we can fix in addition to the larger request here.

Comment 2 Nate Graham 2023-12-21 00:30:29 UTC

Git commit 11e96304eb9544a42a28931abccf231daa58c7b5 by Nate Graham.
Committed on 21/12/2023 at 01:29.
Pushed by ngraham into branch 'master'.

plugins/pastebin: Remove ellipsis from action text

The ellipses can trick the user into thinking it's a safe action because
it will open some kind of dialog before upload, but that doesn't happen.

M  +1    -1    src/plugins/pastebin/pastebinplugin.json

https://invent.kde.org/frameworks/purpose/-/commit/11e96304eb9544a42a28931abccf231daa58c7b5

Comment 3 Nate Graham 2023-12-21 02:27:51 UTC

Git commit e4f316eea99558ca15d4d44fb30a9e3412bec19f by Nate Graham.
Committed on 21/12/2023 at 01:34.
Pushed by ngraham into branch 'master'.

plugins/pastebin: make the action that will happen more obvious

It may not be obvious to users that the thing shared to Pastebin will
become public for the entire world to see. Let's change the text to make
this clearer.

M  +1    -1    src/plugins/pastebin/pastebinplugin.json

https://invent.kde.org/frameworks/purpose/-/commit/e4f316eea99558ca15d4d44fb30a9e3412bec19f