Skip to content

fix(privacy): neutralize local install paths in Store screenshots - #8

Merged
lukisch merged 1 commit into
masterfrom
fix/T-20260926-510472849-screenshot-privacy
Sep 26, 2026
Merged

lukisch merged 1 commit into
masterfrom
fix/T-20260926-510472849-screenshot-privacy

Conversation

@lukisch

@lukisch lukisch commented Sep 26, 2026

Copy link
Copy Markdown
Collaborator

Summary

Team-lead review of #6 found the list-view Store screenshot showed real local installation paths verbatim (e.g. C:\Users\User\OneDrive\.TOPICS\.SOFTWARE\CODING\REL-PUB_MethodenAnalyser\MethodenAnalyser.exe) -- exposing the Windows username and internal OneDrive folder structure.

Root cause: `SoftwareListItemDelegate.paint()` shows the entry's real path as list-view secondary text whenever `notes` is unset, and the demo catalogue's `_board_entries()` never set it.

Fix: pass `notes="Lokal installiert"` for demo entries in both `generate_store_screenshots.py` and the LaunchBoards sibling script (same latent bug there too -- no tracked screenshots yet since its output dir is gitignored, fixed anyway). The path itself is untouched (still used for icon extraction/launch), only the visible secondary text changes.

Regenerated and visually inspected all four screenshots (main-window, tabs, tiles, list) -- confirmed no path text visible in any of them.

Test plan

  • Full pytest suite: 270 passed, 5 skipped
  • Fresh clone of this branch: same 270/5

🤖 Generated with Claude Code

https://claude.ai/code/session_01PTbvD41MCVmnQWaobvHfCk

Team-lead review of #6 found the list-view Store screenshot showed real
local installation paths verbatim, e.g.
"C:\Users\User\OneDrive\.TOPICS\.SOFTWARE\CODING\REL-PUB_MethodenAnalyser\
MethodenAnalyser.exe" -- exposing the Windows username and internal
OneDrive folder structure in a public repo.

Root cause: SoftwareListItemDelegate.paint() shows the entry's real path
as list-view secondary text whenever `notes` is unset, and the demo
catalogue's _board_entries() never set it. Fix: pass notes="Lokal
installiert" for demo entries. The path itself is untouched (still used
for icon extraction/launch) -- only the visible secondary text changes.
Applied to both generate_store_screenshots.py and the LaunchBoards
sibling script (same latent bug, no tracked screenshots there yet since
releases/windowsstore/screenshots-launchboards/ is gitignored -- fixed
anyway so it can't leak once someone does track output from there).

Regenerated and inspected all four screenshots (main-window, tabs,
tiles, list) -- confirmed no path text visible in any of them.

Verified: full pytest suite 270 passed, 5 skipped.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PTbvD41MCVmnQWaobvHfCk
@github-actions

Copy link
Copy Markdown

Welcome! 👋 Thanks for your first pull request in this repository.

A maintainer will review it soon. Please make sure:

  • Your changes are tested
  • Documentation is updated if needed
  • The PR description explains what and why

Thanks for contributing!

@lukisch

lukisch commented Sep 26, 2026

Copy link
Copy Markdown
Collaborator Author

Review (merge-reviewer, claude-opus) auf Head 897106a: Alle vier Screenshots angesehen. In der Listenansicht (Dev, office) steht als Zweitzeile jetzt „Lokal installiert“ statt lokaler Pfade, die Kachelansichten zeigen keine Pfade. _entry hat den Parameter notes schon. Lokal 270 passed. Nicht blockierend und schon vorher so: In tiles-view (Board data) ist das Icon von 23toVCF ein winziges Artefakt oben links, und der Generator enthält die lokalen Pfade weiter im Quelltext, der ohnehin öffentlich ist. Merge.

@lukisch
lukisch merged commit d264785 into master Sep 26, 2026
6 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant