OpenPGP key attached multiple times when message is forwarded or edited as new
Categories
(MailNews Core :: Security: OpenPGP, defect)
Tracking
(thunderbird_esr91+ fixed, thunderbird92+ wontfix)
People
(Reporter: u592880, Assigned: lasana)
References
Details
Attachments
(1 file, 1 obsolete file)
(deleted),
text/x-phabricator-request
|
wsmwk
:
approval-comm-esr91+
|
Details |
User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Steps to reproduce:
- set up OpenPGP and use the key to sign messages (done by default).
- send message.
- go to sentbox, select message sent at step 2, and either forward or "edit as new message"
Actual results:
Whether the message is forwarded or edited as new, the OpenPGP key is automatically re-added to the message, and then added again upon sending the forwarded/new message.
Expected results:
Thunderbird should have seen that the key is already present and prevented its multiple inclusion.
Updated•3 years ago
|
Comment 1•3 years ago
|
||
The code around here should check if the same filename was already in there before adding. If it is, just skip adding it once more.
https://searchfox.org/comm-central/rev/2372e390f3b6add0f2b3530964472fa0e2e4463c/mail/extensions/openpgp/content/ui/enigmailMsgComposeOverlay.js#863
Assignee | ||
Comment 2•3 years ago
|
||
Seems like there is already a check for duplicate attachments here :
https://searchfox.org/comm-central/source/mail/components/compose/content/MsgComposeCommands.js#6692
It checks the file url which is different in this case. On my machine I see /tmp/key.asc
for the new attachement and /tmp.nsmail.asc
for the previous one. I vote we modify this to also check the content type, and file name instead.
Assignee | ||
Updated•3 years ago
|
Assignee | ||
Comment 3•3 years ago
|
||
Assignee | ||
Comment 4•3 years ago
|
||
Updated•3 years ago
|
Assignee | ||
Updated•3 years ago
|
Updated•3 years ago
|
Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/1902bce264de
Do not duplicate public key attachment when forwarding signed messages. r=mkmelin
Updated•3 years ago
|
Updated to latest beta version and this is still happening, with messages either forwarded or edited as new. Since this was marked as resolved before the update, I am not sure whether it should already have shipped in the latest beta.
Comment 8•3 years ago
|
||
It's not yet on beta (92) as you can see from the flags above: thunderbird92: affected
I don't think this needs to be rushed.
Assignee | ||
Updated•3 years ago
|
Updated•3 years ago
|
Comment 9•3 years ago
|
||
Comment on attachment 9236679 [details]
Bug 1725033 - Do not duplicate public key attachment when forwarding signed messages. r=mkmelin
[Triage Comment]
Approved for esr91 (preemptively, since I happened to be here)
lasana, please NI rob if you don't want this uplifted yet)
Assignee | ||
Comment 10•3 years ago
|
||
Should be ok to uplift. Why not to beta first?
Comment 11•3 years ago
|
||
It's already in beta now that beta is 93.
Comment 12•3 years ago
|
||
bugherder uplift |
Thunderbird 91.1.1:
https://hg.mozilla.org/releases/comm-esr91/rev/9e8c5eeedc69
Description
•