185402 - Important Feature Request concerning security of HTML emails

Status: VERIFIED INVALID

(MailNews Core :: Security, defect)

Description

[Marcus]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2) Gecko/20021126
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2) Gecko/20021126

Please don't ignore this, as I am absolutely sure this is the best approach to
ending the continouus discussions about the disadvantages (web sites that know
when email is read, security problems, ...) and advantages (rich text) of HTML
emailing: 

AN OPTION TO TURN OFF ALL EXTERNAL CONTENT and only render images, etc. which
are INCLUDED in the HTML mail (stored locally after POP download) and do not
refer to any http:// addresses. 

Think about it! In combination with turning off scripting and Java, this solves
all problems and everyone can start happily to send rich text emails 

I read today that the next version of Outlook will contain this feature and
because I've been thinking about it for years, and wondering why no-one else
thinks about it, I chose to tell you today.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Matthias Versen [:Matti]]

-> invalid

we have this feature since a few months.

Comment 2

[Felix Miata]

Reporter, are you not aware of the results of the bug 30888 fix?

verified invalid