Weasis icon indicating copy to clipboard operation
Weasis copied to clipboard

Weasis installer disables browser URL security popups via managed policies

Open nroduit opened this issue 1 month ago • 0 comments

Describe the bug. What happened?

The Weasis installer configures browser policies (for Edge, Chrome, Firefox, etc.) in a way that disables the security popups for the Weasis protocol URLs. This makes all browsers on the system display a warning that they are "managed by your organization"—even on personal, non-corporate computers. The user is not informed about this change, which can cause confusion and may override legitimate enterprise policies. More importantly, disabling these popups removes a security layer designed to warn users before opening external applications via custom protocols. This could be exploited by malicious actors if vulnerabilities in Weasis are found.

Expected: The installer should not disable browser security popups by default, and any such change should be communicated clearly to the user.

What version of Weasis are you running?

4.6.5

On which system the problem occurs?

Windows, Linux

Relevant log output


Additional contextual elements

Discussed in https://github.com/nroduit/Weasis/discussions/748

nroduit avatar Oct 27 '25 06:10 nroduit