1108249 - Copying into an email only part of a locally-stored HTML document (from Firefox) results in whole file being attached to the email

Status: RESOLVED INVALID

(Thunderbird :: Message Compose Window, defect)

Description

[general.ledger.101]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:34.0) Gecko/20100101 Firefox/34.0
Build ID: 20141127111021

Steps to reproduce:

In Firefox 34 (under Linux), I opened a very simple, locally-stored HTML file containing several tables. 
I copied one of these tables from Firefox, and pasted it into an email in Thunderbird.
As I expected, in the email message I was about to send, I only saw that one table that I intended to send.




Actual results:

The message which was sent to the recipient also included, as an attachment, the entire local file from which that one table had been copied and pasted. 

Note: the attached file was visible only when the recipient selected to display the message body as simple HTML. Otherwise, the recipient only saw the one table I had intended to send in the first place (although the whole file  was still there in the source of the message, of course).


Expected results:

What should have been sent to the recipient is the one table that I copied and pasted. Not the entire local HTML document from which the table was originally copied (!!!), and which I never selected to attach.

This bug has privacy/security implications, as locally-stored information  is sent to email recipients unbeknownst to the sender.

Comment 1

[Wayne Mery (:wsmwk)]

Not security. perhaps privacy.  Note, unconfirmed implies it needs investigation, so no special need for qawanted keyword.

I think more information is needed. What you pasted must have been in the buffer, so perhaps this one is on Firefox?

Comment 2

[general.ledger.101]

I don't think the entire file was in the buffer. Probably just a link to it. Reason: I tried renaming the local file between the steps of (a) copying the table from the file into the email and (b) sending the email. In the case of the renamed file, the email that was sent did not contain anything other than the table. This is a pretty strong indication that what gets sent with the email is pulled into the email when clicking on "send".

Comment 3

[Joe Sabash [:JoeS1]]

Trying to reproduce with a local html sig file, I can see where this could happen. The key, I think, is that you are never quite sure exactly what you have selected for copying.
In my testing, I picked up a piece of a link that I never intended to copy based on what appeared to be selected. My theory would blame Gecko core selection for the problem.
Bug submitter, if you could provide the html source file that caused your problem (and the method of selection) I might be able to be more definitive.

Comment 4

[general.ledger.101]

Attachment: the HTML file as requested

This is an HTML with a similar structure as the original one. I successfully reproduced the problem when copying Table 3 from the Firefox window, and pasting it into an email message in Thunderbird. The message sent contained the entire file, not just Table 3.

Comment 5

[Joe Sabash [:JoeS1]]

Attachment: cleantesthtml.html

Try with my attached file. It is relatively clean html.The sample you posted contained anchors and links and other references to many remote styles. All of which you inadvertently copied into your mail. "What you see" is actually not what you get, and will never be unless you inspect the code that you are sending.
Not saying that your complaint is invalid, but in the context of where we are with wysiwyg composition, this bug is a dead end. So probably reso INVALID

Comment 6

[general.ledger.101]

The actual contents of the rest of the file were never copied, though.  Why would these anchors and links result in Thunderbird pulling a locally-stored file into the email? Is this a feature?

Note: as I said before, this does not occur if I rename the file before clicking "send" (in which case the anchors and links are now pointing to a non-existent local file).