Typically, you could add arguments in *.desktop files, such as Exec=chromium-browser %U --new-window (taken from my own chromium-browser-chromium.desktop). Since the update to 1.1.0_rc3_p20150119, xdg-open fails to parse this line, and instead start chromium as "/usr/bin/chromium-browser" "http://www.freehackers.org --new-window" so that i have "%20--new-window" added to all my links. I tried using Exec=chromium-browser %u --new-window but this fails as well. My understanding from the specifications is that it should work as it always had. Going back to x11-misc/xdg-utils-1.1.0_rc2-r1 by masking >=x11-misc/xdg-utils-1.1.0_rc3 "fixed" the problem here. I could not say if that's a problem upstream or in gentoo. The offending lines are in /usr/bin/xdg-open function search_desktop_file() the lines starting with arguments="" and nearby. Reproducible: Always
Still there, and now it blocks the whole kde frameworks packages, as kf-env-3 depends on ">=x11-misc/xdg-utils-1.1.0_rc3_p20150119"
This is probably caused by one of the various upstream commits designed to address command injection: http://cgit.freedesktop.org/xdg/xdg-utils/log/. There's also been some further xdg-open changes since our snapshot that could use testing.
*** This bug has been marked as a duplicate of bug 549286 ***
