Bug#784006: caja: Option to show real filename of ".desktop"-files instead of title

[Julian]

Package: caja
Version: 1.8.2-3
Severity: wishlist

".desktop" files are currently shown with the image and the title stated in the
file. There seems no way to change this behavior and show the real file name.

Although that might have been seen as a user-friendly feature when it was
implemented it actually bothers more experienced users (you can find numerous
threads with google about this).
And it even poses a security threat since one can simple mask a potential
hazardous command as something else. There is no way for a user to see that
this is just a .desktop file that will be executed when clicked. So for example
I could send you an "image" (assuming you're not an experienced user; maybe
within a zip file that you'll extract via context menu). You don't even have to
set executable rights afterwards. Clicking the file might then just delete all
your personal stuff or do something worse (like uploading something via wget).
It's exactly the same thing that went wrong with MS Windows except that you
could force Windows Explorer to show the real file name including the
extension. So using Caja is even more risky then Explorer now.

So please add an option to set this behavior.

Regarding the security threat I maybe should've declared this as a "serious"
bug instead of a "wishlist" item.



-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-updates'), (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages caja depends on:
ii  caja-common               1.8.2-3
ii  desktop-file-utils        0.22-1
ii  gvfs                      1.22.2-1
ii  libatk1.0-0               2.14.0-1
ii  libc6                     2.19-18
ii  libcairo2                 1.14.0-2.1
ii  libcaja-extension1        1.8.2-3
ii  libexempi3                2.2.1-2
ii  libexif12                 0.6.21-2
ii  libfontconfig1            2.11.0-6.3
ii  libfreetype6              2.5.2-4
ii  libgail18                 2.24.25-3
ii  libgdk-pixbuf2.0-0        2.31.1-2+b1
ii  libglib2.0-0              2.42.1-1
ii  libglib2.0-data           2.42.1-1
ii  libgtk2.0-0               2.24.25-3
ii  libice6                   2:1.0.9-1+b1
ii  libmate-desktop-2-17      1.8.1+dfsg1-3
ii  libpango-1.0-0            1.36.8-3
ii  libpangocairo-1.0-0       1.36.8-3
ii  libpangoft2-1.0-0         1.36.8-3
ii  libselinux1               2.3-2
ii  libsm6                    2:1.2.2-1+b1
ii  libstartup-notification0  0.12-4
ii  libunique-1.0-0           1.1.6-5
ii  libx11-6                  2:1.6.2-3
ii  libxext6                  2:1.3.3-1
ii  libxml2                   2.9.1+dfsg1-5
ii  libxrender1               1:0.9.8-1+b1
ii  mate-desktop              1.8.1+dfsg1-3
ii  shared-mime-info          1.3-1

Versions of packages caja recommends:
ii  gvfs-backends  1.22.2-1

Versions of packages caja suggests:
ii  engrampa             1.8.1+dfsg1-1
pn  gstreamer0.10-tools  <none>
pn  meld                 <none>

-- no debconf information