Go into /tmp/foo/ and select a bunch of files. Right-click, compress. Ark opens up. I save to /tmp/foo.zip Open the archive - instead of just having a bunch of files, they are stored in my directory tree structure, so if I was to send this zip to someone, instead of just extracting a bunch of files they would recreate my folder structure and potentially see private information in the folder names. This is both a usability bug and a security risk. Reproducible: Always
What do you mean with "my folder structure" or "directory tree structure"? Are you referring to the folder of your username? (e.g. /home/foo)?
No. I'm referring to the folder they are in, its parent, its parent's parent, etc. The whole branch up to root. In the example above if you opened that zip file instead of seeing just a bunch of files you would see them in /tmp/.
I'm now using dolphin-15.08.2 and ark-15.08.2, and I have no "compress" option anymore in Dolphin's context menu, so I cannot try to reproduce.
(In reply to DrSlony from comment #3) > I'm now using dolphin-15.08.2 and ark-15.08.2, and I have no "compress" > option anymore in Dolphin's context menu, so I cannot try to reproduce. This is a bug in KIO (#350769), make sure you update to version 5.16 of KF5. Which distribution are you using?
Gentoo. I will, when it's released. Currently I'm on kde-frameworks/kio-5.15.0
Have you tried again with a more recent version of Ark?
Cannot reproduce using kde-apps-15.08.3 and kde-frameworks-5.17