Skip to content

URL Previews enabled 'accidentally?' in encrypted room #21659

@viasux

Description

@viasux

Steps to reproduce

idk how reproducible this is, but this is all I remember doing

  1. Create a new encrypted & private room on the matrix.org homeserver
  2. Paste a link which can preview
  3. See preview
  4. Close element
  5. Open element
  6. No preview?

Outcome

What did you expect?

I expected there to be no preview in an encrypted room. I assume that this is a bug because it was later re-disabled after reopening the website.

What happened instead?

I literally opened up my mostly unused matrix.org account, only to test this, as I thought "wait, matrix.org has url previews, isn't that a privacy concern if used in encrypted rooms?" This is why I have a before and after screenshot, because I sent it to my friend to ask it about the situation (and then closed the browser), and it told me that this was likely not intended behavior.

Before:
image
After:
image

Keep in mind, I didn't change any room settings after creation. I also am using librewolf and had to enable canvas data and persistent storage during the initial login to my account, idk how that would cause any issues, but it might give some info? idk.

Operating system

Windows 10

Browser information

Librewolf Version 98.0-1

URL for webapp

app.element.io

Application version

Element version: 1.10.8 Olm version: 3.2.8

Homeserver

matrix.org

Will you send logs?

Yes

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-URL-PreviewsO-OccasionalAffects or can be seen by some users regularly or most users rarelyPrivacyS-MinorImpairs non-critical functionality or suitable workarounds existT-DefectX-Release-Blocker

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions