Closed Bug 168258 Opened 22 years ago Closed 22 years ago

Even with Cookie in Mail off cookies are being set when getting css in HTML mail

Categories

(MailNews Core :: Security, defect)

Product:
MailNews Core
Component:
Security
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
VERIFIED DUPLICATE of bug 22994

People

(Reporter: bugzilla, Assigned: security-bugs)

References

(
URL
)

Details

set Mozilla to "dont accept cookies" in Mozilla Mail set Mozilla to "dont show remote images" in Mozilla Mail set Mozilla to show "original HTML" now send a mail to browserspyhtmlmail@gemal.dk now check your cookies in the Cookie manager. A cookie from gemal.dk is now present! 20020911
This is extremely easy to confirm, for me on 1.1final Win32.
the cookie is inserted form the HTTP request of the css file from a HTML mail. See bug 168174 about the css fetch
Depends on: 168174
This is actually a dup of bug 22994 (Mail reader allows spammers to set cookies to track web usage) and it indicates that there is more work to be done for that bug. *** This bug has been marked as a duplicate of 22994 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
Verified.
Status: RESOLVED → VERIFIED
it's browserspy-htmlmail@gemal.dk just send a mail and you get a HTML test mail return. The tests include image support, scripting support, cookies, etc
URL: http://gemal.dk/browserspy/mail.html
henrik, is browserspy-htmlmail@gemal.dk still up and running?
ignore my last comment it's seems to be up now.
Product: MailNews → Core
Product: Core → MailNews Core
You need to log in before you can comment on or make changes to this bug.