Xlspadlock OneDrive Save As suggestion

jav2110

New member
I think there is a vulnerability in the software, when protected files are involved in office 365, the problem comes when you want to save and a window like this appears:
Screenshot 2024-11-26 144245

The user has the possibility to save the protected file in OneDrive. The guide is not clear about this issue, I have the experience with one of my products. A user was able to extract the protected workbook. For one hand the protected workbook is setting to save the protected workbook as xlsc file ( a file) but when the user tries to close the protected workbook appear the window where there is the option to save in OneDrive.
 
Last edited by a moderator:
I saw the protected workbook showing developer tab in one query that the client asked me, and I try on my own to emulate the scenario and I found easy to hack, I haven’t realized until yesterday because most of my clients do not use office 365 and that window do not appear.

Do not allow loading/saving other workbooks is unable. I think the program must disactivate that kind of things like it does with normal options of saving.
 
The “Save to the cloud” dialog is recent and Microsoft doesn’t let us override it. We are still researching. Anyway, with the option you don’t want to activate for some reason, the workbook will NOT be saved properly to the cloud, so it’s safe.
The Developer tab is hidden by default, unless you let it visible with the corresponding Advanced Option of XLS Padlock
 
I don’t let user enable developer tab, the user achieve to extract the workbook, I believed that it was not necesary to activate the option you mencioned until I found out that the windows related to onedrive is a potencial vulneravility, as you mencioned activaiting the option is a good way to protect workbooks.
 
We finally found a way to modify that final OneDrive dialog box. This has been included in XLS Padlock 2024.3, please upgrade.
1_2.png
XLS Padlock 2024.3 Released And Enhanced for Your Security Needs - December 9th, 2024 XLS Padlock
loudspeaker
XLS Padlock version 2024.3 is now available on www.xlspadlock.com. This release focuses on improving compatibility, fixing critical bugs, and enhancing your user experience: Fixed Compatibility with Windows 11 24H2 and KB5046740 preview update: Resolved a critical issue affecting workbook functionality due to the latest Windows update preview. Improved User Interface: Several configuration pages have been updated to prepare for upcoming multi-language support and fix display glit…
 
Back
Top