[Qgis-user] Question regarding QGIS and Microsoft ASR rule "Block use of copied or impersonated system tools"

[Andrea Giudiceandrea]

Hi Gert-Jan,
AFAIK, QGIS itself doesn't execute either curl.exe or powershell.exe.

The code in qgsnetworkloggernode.cpp only copies the text string of a 
CLI command in the system clipboard. Such command is not automatically 
executed by QGIS: it can be manually pasted in a CLI shell by the user 
in order to be manually executed be the user.

Please read https://github.com/qgis/QGIS/issues/64160 and particularly 
https://github.com/qgis/QGIS/issues/64160#issuecomment-4874695133.

Regards.

Andrea

> Gert-Jan van der Weijden - GISNederland gert-jan at gisnederland.nl
> Tue Sep 1 12:59:18 PDT 2026
> Searching the Qgis source code in Github on "curl" I found one reference 
> to "curl", in "qgsnetworkloggernode.cpp"
> See for yourself at 
> "https://github.com/search?q=repo%3Aqgis%2FQGIS+curl&type=code"
> 
> I guess this is triggered when you use the debugging/development tools 
> panel (in the menu under "view"->"panels")
> Could that be the ASR-trigger for curl.exe?