Closed Bug 374696 Opened 18 years ago Closed 18 years ago

Image blocking is broken. Images show anyway, not all images though - so it seems someone found a workaround.

Categories

(Thunderbird :: Mail Window Front End, defect)

x86
Windows XP
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 322533

People

(Reporter: myke, Assigned: mscott)

Details

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727) Build Identifier: version 1.5.0.10 (20070221) Network.image.imageBehavior is set at '2', mailnews.message_display.disable_remote_image is set at 'true', mailnews.message_display.disable_remote_images.useWhitelist is set at 'true', mailnews.message_display.disable_remote_images.whiteListAbURI is set at 'moz-abmdbdirectory://abook.mab' The tag that shows the image is written like this: (I have stripped it to keep it from being chomped, I hope): <IMG alt=3D"" = hspace=3D0=20 src=3D"cid:000d01c76b92$926f8d90$00000000@homekomp" align=3Dbaseline=20 border=3D0></A> Reproducible: Always Steps to Reproduce: 1. Look at spam message 2. see image 3. dread that someone's server is now telling them that the image was downloaded/viewed (i.e. the email was viewed) 4. repeat Actual Results: 1. saw the image Expected Results: The software should not have let the image be shown, and more importantly, it should never have downloaded the image that was to be denied or shown. Speaking of... why is there not a plain text/strip all formatting option on thunderbird?
I saw something unexpected yesterday in Thunderbird 2 myself but I think this was an inline image which Thunderbird doesn't block since it is not remote. I'm not sure if this helps but check if http://kb.mozillazine.org/Permissions.default.image is set. You can display emails with the original html, simplified html or plain text through View->Message Body As... Let me know if a) the message contained the image encoded in the message body; look at the message source via Ctrl-U, b) if the image was remote and that preference helps.
Since the src goes to a cid: url, it's an embedded image... looks invalid.
Dupe of bug 322533, I think (or maybe another, I think that bug is itself a dupe of an older one that I can't find at the moment).
Thanks Mike. I'll take the liberty.
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.