Specifically the IMG and IFRAME elements can be used to include remote or local resources. The Signal-Desktop software fails to sanitize specific HTML elements that can be used to inject HTML code into remote chat windows when replying to an HTML message. The attacker needs to send HTML code directly as a message, and then reply to that message to trigger this vulnerability. Once there is a high enough install base, the Microsoft Defender SmartScreen will not appear.Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. This is a known behavior after updating our code signing SSL cert for the desktop application. Note: If this is a new install, you may see a Windows warning module similar the one below.

The Mac and windows urls will then be displayed which can be used to test.

Select Enable Link Only - This will prevent the Download Banner showing for members.

On the the Manager App, navigate to to Admin > Community Settings > Desktop App.

If the IT Support Team needs to test the Desktop App first before distributing to members then below steps can be followed:

The MSI version should be able to be deployed via SCCM.

The MSI installer does not have auto updating abilities.

The MSI installer is now available as part our October 15th release.

/Allusers is case-sensitive and will install the application to all users of the local machine.

/S is case-sensitive and will install the application silently to your selected machines.

The quotation marks should include the name of your.

The command line code ' 0.3.5.exe' /S /Allusers will silently install the application to all users of the machine, rather than on an individual per-user basis.

How the Desktop App will be shared out to your individual members will need to be considered on a case-by-case basis given your needs, but here is some additional info regarding distribution: Microsoft Windows For more info regarding the desktop app, please see our Desktop Application article. The desktop app is designed as an enterprise solution to the Dynamic Signal platform.

Signal messenger windows