173730 - Plugins loaded in news messages even though not requested by mail

Status: VERIFIED DUPLICATE of bug 169991

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Arthur]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2b) Gecko/20021009
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2b) Gecko/20021009

Viewing certain messages in newsgroups starts the QuickTime plugin (via the
crossover plugin) even though the message doesn't contain a anything looking
like a QuickTime attachment or link. And it's started even though plugins are
disabled for mail and news in the preferences (security issue?). I'll attach the
source of one of the messages.

Reproducible: Always

Steps to Reproduce:
1. Subscribe to the comp.security.ssh newsgroup with you newsserver
2. Look up the attached message
3. Wait until the plugin starts

Actual Results:  
Displays a broken QT-Picture.

Expected Results:  
Should show the message.

I've installed the Crossover plugin 1.0.2. I'll attach my about:plugins page.

Comment 1

[Arthur]

Attachment: One of the messages triggering the plugin.

Comment 2

[Arthur]

Attachment: My about:plugins page (without stylesheet, sorry)

Comment 3

[Arthur]

Two additional comments: This is at least a week old, as a build from then
showed this behaviour as well. And with broken QT-Picture in the description I
mean the picture you're shown when a QT-movie is broken and can't be displayed.

Comment 4

[Ere Maijala (slow)]

Possibly related to bug 110729 and bug 172557.

Comment 5

[Arthur]

I've seen those bugs too. The strange thing here is that there's no reference to
anything that could be loaded by a plugin...

Comment 6

[[e-mail] (gone - use [e-mail] instead)]

Guys, it's the Australia TLD (top-level domain) that we're choking on. 

Quicktime holds .au file types to itself, and we're handing it this news message
because of the domain. 

I have a DUP on this, which I'll dup this to in a second.

Comment 7

[[e-mail] (gone - use [e-mail] instead)]

http://bugzilla.mozilla.org/show_bug.cgi?id=169991

*** This bug has been marked as a duplicate of 169991 ***

Comment 8

[[e-mail] (gone - use [e-mail] instead)]

verified dup