Chrome doesn´t handle environmental variables for foldernames in gpo
Reported by
jasper.z...@gmail.com,
Mar 19 2018
|
||||
Issue description
Version of Google Chrome (Wrench-> About Google Chrome): ALL
Version of MSI (if applicable): ALL
Using group policy settings? Yes
Chrome doesn´t handle the classic Windows variables, like %username% and %userprofile%, or custom made variables like %filer%.
I am trying to set the default download location with the chrome admx files. Normally, this should be something like \\%filer%\%department%\home\%username%\Downloads (these are custom variables that are defined on each system). The "Downloads"-folder is also redirected to this location, but the full profile is not.
The chrome-variables (like ${documents}) are not enough, can this be fixed?
,
Apr 23 2018
It sounds like there could be a security-related issue with supporting environment variables that are controllable by the user in that case (eg. if the user can modify one of the above variables, he can control where Downloads are saved).
,
Apr 23 2018
I don't think that is a problem, as Chrome runs in the user context, and the user could move/copy the downloads afterwards anyway? The custom variables are set with GPO's. I would have to check, but I don't think they can be overwritten without admin permissions.
,
Apr 24 2018
OK. Following-up with the team, it looks like we could avoid security-related issues by restricting expansion to system-level variables. Marking as triaged and leaving this open as a FR.
,
Aug 1
|
||||
►
Sign in to add a comment |
||||
Comment 1 by mad@chromium.org
, Mar 19 2018Owner: privard@chromium.org
Status: Untriaged (was: Unconfirmed)