Open Bug 1655291 Opened 5 years ago Updated 5 years ago

Disable/modify hyperlinks when remote content is disabled

Categories

(Thunderbird :: Security, enhancement)

enhancement

Tracking

(Not tracked)

UNCONFIRMED

People

(Reporter: larry.vsp1.shopping, Unassigned)

Details

(Whiteboard: [dupme])

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

My ISP is currently having an issue with their spam filtering, and consequently I'm doing a lot of manual reporting to help build the corpus. I have discovered the hard way that although Thunderbird is good at disabling remote content, it leaves links in messages enabled when remote content is disabled. Because I'm manually reporting on a lot spam, I've accidentally clicked on several links in message windows.

Actual results:

The spammer got me to open a link in an message when I was just trying to bring Thunderbird to the front (they win even from my accident). I'd like to say this is a one off, but as I've done it four or five times in the last two weeks, I'm calling this a design flaw.

Expected results:

If remote content is disabled for a message, any links in the message should not open on a single click. Outlook deals with this problem by requiring a control-click to open links where remote content is disabled (and I can consequently say, I've never accidentally opened a link using Outlook).

(pretty sure this is a duplicate - might be an already closed bug)

Component: Untriaged → Security
Whiteboard: [dupme]

Happy to close it if it is a duplicate. I had a good look and didn't find anything else that matched up.

You need to log in before you can comment on or make changes to this bug.