The ppt sound collection fetched the sound url straight through UcbStreamHelper, without the referer and exotic-scheme checks applied before fetching any other document-supplied url. The avmedia media loader guards the same way: commit5668e73bebDate: Wed Nov 20 14:43:45 2013 +0100 avmedia: Implement "block untrusted referer links" feature commit836d73a651Date: Fri Nov 15 12:30:39 2024 +0000 consider VndSunStarExpand an exotic protocol Signed-off-by: Caolán McNamara <caolan.mcnamara@collabora.com> Change-Id: I2e3f6e025dba2b660e3b69a7c8097e3663e8d1a9 Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/4548 Tested-by: Jenkins CPCI <releng@collaboraoffice.com> Reviewed-by: Stephan Bergmann <stephan.bergmann@collabora.com> (cherry picked from commit d0663178249d57ee55a505813efc8a9618478a3f) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/208024 Tested-by: Jenkins Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>