Thunderbird does not check e-mail address format sufficiently - should not allow address ending with dot
Categories
(Thunderbird :: Message Compose Window, defect)
Tracking
(thunderbird_esr140 affected, thunderbird141 affected)
People
(Reporter: sc.it, Assigned: mkmelin)
Details
Attachments
(2 files)
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0
Steps to reproduce:
- Write an e-mail. In the To-field add an e-mail-address ending with a dot, such as me@example.com.
- Send this e-mail
Actual results:
- The e-mail-provider (in this case: GMX.de) sends an error message, referring to https://postmaster.gmx.net/en/case?c=hi&i=ip&v=86.103.57.60&r=1MysRk-1uvq4O3pfm-00xqRY.
- TB shows error message with title "Send Message Error", see attachment. Unfortunately I was not able to copy the message text or URL from the error window because this just did not work.
Expected results:
- TB validates the given e-mail-address before sending, see RFC 5321.
- In case of a validation error TB shows a meaningful error message and asks the user for correction. If possible, TB suggests a corrected e-mail-address (I think, in this case this would have been possible).
- In case of a received server error, which cannot be handled beforehand, TB shows a clickable link button with a human-readable, meaningful error message and an advice to solve the problem. TB also allows the user to copy the message from the error windows.
Assignee | ||
Comment 1•1 month ago
|
||
We should probably remove the ending dot automatically before finalizing the address pill. Such dots can easily happen for copy-paste.
Assignee | ||
Comment 2•1 month ago
|
||
Though replacing could be error prone (esp. as we also have mail lists to consider).
But we should add the warning it's invalid.
Assignee | ||
Comment 3•1 month ago
|
||
When copy-pasting from somehwere, these could easily be found after the address
Updated•1 month ago
|
Exactly, the error was caused by copy & paste.
Speaking of copy & paste, we should IMHO consider one or more trailing whitespaces, too.
AFAIK the complete mail address spec is given in RFC 5322. Regarding comment 2: in RFC 5322, section 3.4 I found something about distribution lists (e. g. mail lists): "This is done by giving a display name for the group, followed by a colon, followed by a comma-separated list of any number of mailboxes (including zero and one), and ending with a semicolon."
I hope this helps.
(In reply to Sven P from comment #0)
- [...] Unfortunately I was not able to copy the message text or URL from the error window because this just did not work.
Regarding this (UI related) part of my report, I filed bug #1976565.
Assignee | ||
Comment 6•1 month ago
|
||
Yes, comma and semicolon have special meaning. At the point I'm adding the check they should already be handled by code running before it - and would be invalid in that context.
Assignee | ||
Updated•1 month ago
|
Pushed by kaie@kuix.de:
https://hg.mozilla.org/comm-central/rev/45035b144f5a
Don't say address pill ending with with any of .,:;!?- is valid. r=tobyp
Description
•