Bug 487238 - Dolphin titlebar shows samba-password when "Show full path in title bar" enabled
Summary: Dolphin titlebar shows samba-password when "Show full path in title bar" enabled
Status: CONFIRMED
Alias: None
Product: dolphin
Classification: Applications
Component: general (show other bugs)
Version: 24.02.2
Platform: Fedora RPMs Linux
: NOR normal
Target Milestone: ---
Assignee: Dolphin Bug Assignee
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-19 14:43 UTC by Liz Lee
Modified: 2024-11-12 18:13 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Liz Lee 2024-05-19 14:43:02 UTC
STEPS TO REPRODUCE
1. Open Dolphin
2. Enable "Show full path in title" in the settings
3. Open a samba-share, whose password has been stored in the string via klicking a link in the remote places section on the left panel.

OBSERVED RESULT
The window title shows the string with the password:

smb://exampleuser:examplepassword@192..../exampleshare

EXPECTED RESULT
The window title should omit the password in the string and anly show:

smb://exampleuser@192..../exampleshare



SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Fedora 40, Kernel 6.8.9-300.fc40.x86_64, wayland
KDE Plasma Version: 6.0.4
KDE Frameworks Version: 6.2.0
Qt Version: 6.7.0

ADDITIONAL INFORMATION
Even in the address/location/navigation bar (or whatever it's called) the password is not visible (i guess for security reasons), as it omits the password from the string:

smb://exampleuser@192..../exampleshare
Comment 1 TraceyC 2024-11-04 21:43:37 UTC
I'm not able to replicate this with git-master
Can you see if this is still happening on your system with Plasma updated to 6.2? Thanks!
Comment 2 Liz Lee 2024-11-08 13:15:48 UTC
turns out it (only?) happens if you type in the address manually in the location bar in the format:
smb://user:password@192.../sharename

as soon as you hit [enter] the password is omitted from the adress in the _location_ bar, but the password still is included in the address shown in the _title_ bar.

i could not reproduce this behavious with shares whose addresses are stored e.g. as remote-entries in the places-list.
Comment 3 TraceyC 2024-11-12 18:13:57 UTC
Thanks for that additional detail. I can reproduce that behavior on Dolphin built from git-master.