On: Macro-Less Code Exec in MSWord

[ksk]

If you download such a file, the default setting of the protected mode should cover this.

https://i.imgur.com/49x2IZN.png

[The6P4C → ksk]

Who doesn't immediately click out of protected view though?

[ksk → The6P4C]

Yeah, I wonder if we need two paradigms here. Clicking things should only be for non-executable read-only stuff. And we need another UI verb for when we want to execute code, read/write, etc. Hard to get people onboard though, when they're just used to doing it one way.

[sleepychu → The6P4C]

Why would you? (If you're just reading it)

[technion → sleepychu]

The primary issue for me is that in protected mode, you can't copy to clipboard. So I can't take a note and send it to someone, I can't paste something into a ticket system, etc etc. I have to admit I'm pretty used to just clicking out of protected mode.

[Walf → sleepychu]

Word exits protected mode just to print. Apparently you can create screen pixels from that mode, but not if they're going to end up in a PDF or on paper.