<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[HELP on Macros - security issue?]]></title><description><![CDATA[<p dir="auto">Hi everyone!<br />
I have a few macros on my npp installation, which always have worked fine - all of them are typing macros.<br />
Today I tried executing one of them and I got a warning on the <code>shortcuts.xml</code> file saying it “should be validated, using the menu”.</p>
<p dir="auto">In fact if I go to the “Run” menu, I find a new option I had never seen before saying “Validate shortcuts.xml”.</p>
<p dir="auto">I have done quite a few web search in different engines and also AI, and I could not find any references to this menu entry. I checked the release .log file, no mentions on it either. I am worried this could be some sort of malware.</p>
<p dir="auto">I checked <code>shortcuts.xml</code> myself and I don’t see any custom comand with this description, which tells me it should be a native command.</p>
<p dir="auto">I made a new installation over the new one, same warning. I uninstalled, installed again, same warning. Then I remembered I had forced the pc to shut down, which might have corrupted the file, and then I did a manual restore of one of my backups. I had a new security warning,this time because the file was manually updated - but again telling me to run “Validate <code>shortcuts.xml</code>”.</p>
<p dir="auto">I made a test macro, so that npp would itself read and write the shortcuts file and now all seems to be working. But the menu entry is still there.</p>
<p dir="auto"><strong>But the question remains</strong>: Is this “Validate shortcuts.xml” a native option?<br />
<img src="/assets/uploads/files/1784546130778-f1538470-643d-4275-84f2-c76b9bb7e556-image.jpeg" alt="f1538470-643d-4275-84f2-c76b9bb7e556-image.jpeg" class=" img-fluid img-markdown" /></p>
<p dir="auto">One can never be to cautious…</p>
<p dir="auto">Thanks in advance!</p>
]]></description><link>https://community.notepad-plus-plus.org/topic/27609/help-on-macros-security-issue</link><generator>RSS for Node</generator><lastBuildDate>Tue, 21 Jul 2026 11:28:55 GMT</lastBuildDate><atom:link href="https://community.notepad-plus-plus.org/topic/27609.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 20 Jul 2026 11:15:58 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to HELP on Macros - security issue? on Mon, 20 Jul 2026 17:58:09 GMT]]></title><description><![CDATA[<p dir="auto">User Manual has been updated:</p>
<ul>
<li>Renamed header to “shortcuts.xml Security” and includes mention of Macros as well: <a href="https://npp-user-manual.org/docs/config-files/#shortcutsxml-security" rel="nofollow ugc">https://npp-user-manual.org/docs/config-files/#shortcutsxml-security</a></li>
<li>added Macros Security on the macros page: <a href="https://npp-user-manual.org/docs/macros/#macro-security" rel="nofollow ugc">https://npp-user-manual.org/docs/macros/#macro-security</a></li>
<li>added a paragraph linking to the “shortcuts.xml Security” page in the Running External Commands page: <a href="https://npp-user-manual.org/docs/run-menu/#security-is-your-responsibility" rel="nofollow ugc">https://npp-user-manual.org/docs/run-menu/#security-is-your-responsibility</a></li>
</ul>
]]></description><link>https://community.notepad-plus-plus.org/post/105936</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/105936</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Mon, 20 Jul 2026 17:58:09 GMT</pubDate></item><item><title><![CDATA[Reply to HELP on Macros - security issue? on Mon, 20 Jul 2026 14:34:35 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/my-name-is-jon" aria-label="Profile: My-name-is-Jon">@<bdi>My-name-is-Jon</bdi></a> <a href="/post/105931">said</a>:</p>
<p dir="auto">I have done quite a few web search in different engines and also AI, and I could not find any references to this menu entry.</p>
</blockquote>
<p dir="auto">Apparently, your search engines don’t stay abreast of updates to the official online user manual for Notepad++, because <a href="https://npp-user-manual.org/docs/config-files/#run-menu-security" rel="nofollow ugc">https://npp-user-manual.org/docs/config-files/#run-menu-security</a> most definitely describes that menu entry, though it focuses on the run-commands aspect, and should be clarified to also refer to macos.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/105932</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/105932</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Mon, 20 Jul 2026 14:34:35 GMT</pubDate></item></channel></rss>