David Christofas
David Christofas
But as far as I understand this issue it's not about permissions. The issue is about the invalid xml: `
At least this is what I understood.
AFAIK only when you create a new file or edit one. The ones which were not touched don't get an updated year.
https://github.com/cs3org/reva/pull/2616
https://github.com/cs3org/reva/pull/2624
https://github.com/cs3org/reva/pull/2666
I think this concept is good. > In some cases like SaaS Web Office (eg. Office 365) the attack surface is unknown and out of your control. So one should...
I wasn't been able to test this in Office365 yet but at least on OnlyOffice there is the option to add macros to a document under the plugins tab. ...
> Yet, as an attacker, you'd need to get control over the client's browser to be able to execute that macro. Otherwise how would you force a client to execute...
One option is to add the file version to the encrypted file header.