248853 - thunderbird displays IFRAMEs when they're included in an html mail

Status: RESOLVED DUPLICATE of bug 28327

(Thunderbird :: Mail Window Front End, defect)

Description

[ponzonik]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Build Identifier: mozilla thunderbird version 0.7 build 20040616

I received a html mail with an IFRAME and Thunderbird displayed it. This could 
create a security problem.

Reproducible: Always
Steps to Reproduce:
1. in the main window go to file / new / messege
2. click on the mail body. then go to insert / html...
3. paste this [<iframe src="http://www.partirviajes.com.ar"></iframe>] 
(without the brackets)
4. save the mail in the drafts folder
5. open it
Actual Results:  
you can view whatever you pointed to with the iframe in the html source inside 
the mail window within thunderbird

Expected Results:  
the mail client shouldn't have show anything.
iframe's aren't supposed to work in mail html.

Comment 1

[ponzonik]

Attachment: example of a mail with an iframe within

if you want to see an example of the bug reported you can import the mail into
thunderbird; otherwise you can just follow the instructions to reproduce the
problem.

Comment 2

[Daniel Veditz [:dveditz]]

*** This bug has been marked as a duplicate of 28327 ***