When sharing a folder with a password, notification exposes images in body of email
When sharing a folder with a password, the email notification will sometimes contain images from that folder in the body of the email. This could result in a data leak as these images are exposed via a publicly available URL and because email is considered an insecure medium. This functionality does not appear to be optional, as I could not find a way to turn it off. I've had trouble reproducing the issue reliably. It seems randomly the email notification will contain images from the shared folder. Requested change: allow user to turn off this incidental photo sharing in email notification for protected folders. Reproduce: 1. In OneDrive, right click on a folder that contains pictures. 2. Click share a folder -> Share Settings -> Set "can view" and set a password -> Apply. 3. Send to an email. 4. Check the received email.The email notification will contain a random subset of pictures from the folder. The picture(s) URL can be accessed universally. When attempting to access the folder itself, OneDrive requires a password.Sharing a password protected folder requires user to sign in before viewing
Hi, When sharing a password protected folder out of OneDrive, I've run into a bug that requires a user to sign into O365 before they can access the folder even when it's "anyone with link can view". Instead of receiving the expected password prompt, they are directed to an O365 login. The only way I've found to fix it is if the user clears their browser cache or opens a private window. Reproduce 1. Share a folder -> Share Settings -> Set can view and set a password -> Apply. 2. Send to an email. 3. Repeat with a different item:Share a folder -> Share Settings -> Set can view and set a password -> Apply. 4. Send to email. 5. Do not be signed into O365. 6. Open the first link. Should be prompted for password. 7. Open the second link. Will not be prompted for password and instead directed to O365 login.