119674 - Need to be able to forward message without displaying it

Status: VERIFIED DUPLICATE of bug 30560

(MailNews Core :: Security, enhancement)

Description

[david.hagood]

I use Spamcop, and forward my spam to it. I'd like to be able to forward spam
without causing Mozilla to display the spam, but any action that designates a
mail message (e.g. right-clicking on the message title) causes that message to
be displayed - thus causing any external hrefs to be fetched, any inline Flash
to be executed, etc.

I'd like to be able to right click on the title, select Forward as attachment,
and send it on its merry way to Spamcop without Mozilla trying to render the
message.

Comment 1

[Ben Ruppel]

This depends on a bug that's out there concerning the ability to right-click on
a message or folder without selecting it.  Prolly a dupe.

Comment 2

[Michael Klose]

Have a look at bug #28327 (RFE) - it describes what you are looking for in a
different way - do not allow network access unless you specifically allow it to
do so while viewing a mail. I like what the last comment of that bug proposes,
having a button to start loading images.

Comment 3

[david.hagood]

I was aware of that bug, but there is another aspect to this -

A spammer could send out a mail containing an INLINE .swf file, with coded
commands to access his site. Since the .swf is inline, just disabling network
hits during mail reading wouldn't catch this. I don't know if the Shockwave
plugin gets its network connectivity via Mozilla or directly, so I don't know if
Mozilla can prevent it from accessing the network.

Comment 4

[Boris Zbarsky [:bzbarsky]]

Adding dependency on bug 30560 ("right-clicking a mail message/folder should not
display it").  I think this should just be marked a duplicate of bug 30560

Comment 5

[Mitchell Stoltz (not reading bugmail)]

*** This bug has been marked as a duplicate of 30560 ***

Comment 6

[John Unruh]

Verified