Solved URL Shortcut dragged to desktop is blocked by default

[joeduffus]

This seems to be a similar issue as was reported in VB-41011 but I read that this was "fixed." It is not.

1. Drag the URL (grasping the padlock icon) to the desktop on Windows10 and release. A named URL file is created and saved to the desktop.
2. Double-click the desktop shortcut and the following warning appears:

It is possible to right-click the shortcut and Unblock it so it will
open without the warning. But doing this same task from other Chromium-based browsers (I tested Edge-DEV and Brave) saves the shortcut with no security flag, allowing it to open immediately.

[pafflick]

This bug is now fixed in Vivaldi 5.6.

[joeduffus]

@gwen-dragon I have just done so.

[joeduffus]

@gwen-dragon VB-79801

[joeduffus]

Nice shootin!

[joeduffus]

I confirmed your assessment that adding a carriage return to the end of the .url text file in Notepad++ allows the shortcut to open without the challenge.

As a possible enhancement, might it be possible to have the generated shortcut file use the favicon file from the original site? I notice that while dragging the shortcut from the browser to the desktop Windows does so, but one the mouse button is released the shortcut reverts to the default program to open it. (Vivaldi Snapshot for me.)

[joeduffus]

@Gwen-Dragon Just to bump this, the problem remains in the latest Snapshot 4.0.2312.13 (Official Build) (64-bit).

[joeduffus]

@doctorg Boy, is it! I have complained about this, and posted bug reports about it for many months. And it still hasn't been addressed.

Every other browser seems to do this correctly -- Edge, Firefox, Brave are the ones I've tested. WHY is this so difficult for Vivaldi?

[Pesala]

@ThinkerBe The Bug Status thread should not be used for discussion.

The security warning is part of the Chromium code.

[joeduffus]

@Pesala I don't wish to violate the rules of the thread, but I believe it is not true that the bug is "within the chromium code."

If it were, wouldn't Chrome, Edge, and Brave have the same problem? I have all three and none of the others does. ONLY Vivaldi.

[DoctorG]

@joeduffus Which security warning?

[joeduffus]

@DoctorG I explain it here.

[DoctorG]

@joeduffus said in URL Shortcut dragged to desktop is blocked by default:

VB-79801

I checked tracker for this issue, not fixed , and updated for 5.4 Daily and current 5.3 Stable.
A annoying issue, but i do not often drag URLs from address field to Windows desktop.

[DoctorG]

@joeduffus See https://forum.vivaldi.net/post/587039

[Pesala]

@joeduffus Do you mean this dialog when downloading executable files, or the one caused by out of date certificates?

[joeduffus]

@DoctorG Thank you very much for checking! In the great scheme of things, this a small issue, but I know I am not alone in the habit of dragging shortcuts to the desktop for various things. It has been a part of basic browser functionality since the earliest days and is still useful for short term reminders.

That said, the issue is apparently as small as the carriage return character Vivaldi uses -- or fails to -- when it creates the URL file. If you open a shortcut file created by a different Chromium-based browser in a good text editor, you'll see the URL ends with a carriage return-linefeed character pair (CR/LF). Vivaldi's file ends the first line with just an LF character and adds no terminating CR/LF to the end of the URL. That is what generates the security warning from Windows, as far as I can tell.

I'm just frustrated because it seems like it should be a very small effort to finally FIX this little, nagging, annoying problem if I can only get someone interested in doing it.

[joeduffus]

@Pesala No.

As I explain in the link above it is this warning:

[Pesala]

@joeduffus You don't need to unblock it. Just click on Open and it opens fine. One extra useless click, but not a deal-breaker.

However, it is surprising that such an old bug has not been fixed yet, when it appears to be a trivial fix.

[DoctorG]

@joeduffus Dev said that it is not the broken line-ending alone, much mire to fix for Windows Security.

[Pesala]

@joeduffus You may be talking about a different bug to the one reported by the OP.

[joeduffus]

@DoctorG I'm fairly technical, so can you provide more information about what the developer said? If it has to do with associating a .URL file within Windows, I have done that and it doesn't stop Vivaldi (my default browser, of course!) from properly opening a shortcut file that was created by someone else's browser.