Closed
Bug 168668
Opened 22 years ago
Closed 21 years ago
Attachments rendered regardless of content-disposition field
Categories
(SeaMonkey :: MailNews: Message Display, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 147461
People
(Reporter: rlm, Assigned: sspitzer)
Details
Attachments
(1 file)
(deleted),
text/plain
|
Details |
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020605
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020605
Spamassassin (http://www.spamassassin.org) is a Perl module that detects spam
and allows users to route it rather than being forced to read it. One of its
useful features is that it strips MIME and converts the entire document to text,
so that web bugs (images with long user identification strings, etc.) are
rendered useless. Mozilla somehow refangs the mail (rebuilds the document
assuming all the MIME types at the document's separators are correct) without
checking the overall document type.
Reproducible: Always
Steps to Reproduce:
1. First, install SpamAssassin.
2. Next, give a spammer your e-mail address and wait for some multipart
MIME/HTML spam to appear in your inbox. This shouldn't take long :-).
3. Hopefully, SpamAssassin will have tagged the message so you can use one of
Moz's mail filters to kick it into its own folder. The message should be
"defanged" -- converted globally to HTML type text/plain in the headers.
4. Try to forward the defanged message.
Actual Results:
You'll see rendered HTML.
Expected Results:
The same defanged message.
Since you guys probably don't have SpamAssassin running around your network,
I'll attach an example in a followup.
Reporter | ||
Comment 1•22 years ago
|
||
Reporter | ||
Comment 2•22 years ago
|
||
Alternatively, you could just mail yourself the attachment above and forward it
to verify the bug.
Comment 3•22 years ago
|
||
This is not a Mozilla issue, but a SpamAssassin issue. It was resolved starting
in 2.50. The messages from then on are attached.
Comment 4•21 years ago
|
||
marking fixed per comment 3.
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago
Resolution: --- → FIXED
Comment 5•21 years ago
|
||
Nothing in Mozilla was broken or fixed.
Status: RESOLVED → UNCONFIRMED
Resolution: FIXED → ---
Comment 6•21 years ago
|
||
->WORKSFORME
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago → 21 years ago
Resolution: --- → WORKSFORME
Reporter | ||
Comment 7•21 years ago
|
||
Okay, I'm reopening this. The problem is that attachments aren't treated as
attachments but are rendered anyway. This is Bad if you're trying to avoid
detection as a Real Human Being thanks to web bugs and other nasties that rely
on HTML parsing/processing.
Status: RESOLVED → UNCONFIRMED
Resolution: WORKSFORME → ---
Reporter | ||
Comment 8•21 years ago
|
||
Changing the summary to more accurately reflect the problem.
Summary: SpamAssassin defanged mail is refanged on mail forward → Attachments rendered regardless of content-disposition field
Comment 9•21 years ago
|
||
You will run smack into this problem whenever someone sends you a bunch of large
digital camera images. Mailnews and/or thunderbird insists on downloading and
displaying each and every one of them from the IMAP server.
Content-disposition-tags notwithstanding.
I got a 12MB batch of images today and mozilla had not been able to open the
message in 20 minutes using the company 10Mbps net access. Needless to say,
using the mailserver web frontend, downloading those images tooks less than a
minute.
Comment 10•21 years ago
|
||
Comment 11•21 years ago
|
||
Jo Hermans is right about the duplicate.
*** This bug has been marked as a duplicate of 147461 ***
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago → 21 years ago
Resolution: --- → DUPLICATE
Updated•20 years ago
|
Product: Browser → Seamonkey
You need to log in
before you can comment on or make changes to this bug.
Description
•