270068 - X-Account-Key: & X-Mozilla-Keys: header is not removed from forwarded mail(message/rfc822 part) when foward a mail as attachment

Status: NEW

(MailNews Core :: Composition, defect)

Description

[WADA:World Anti-bad-Duping Agency]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a5) Gecko/20041115
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a5) Gecko/20041115

X-Account-Key: headers was not removed from message/rfc822 part in
mixed/multipart when fowarding a mail as attachment.
X-Account-Key: header should be removed on forwarding.
(X-UIDL:, X-Mozilla-Status: and X-Mozilla-Status2: header are removed.)

This problem occured on both Mozilla Mail&News and Thunderbird.
 - Mozilla Suite latest-trunk nightly 2004111505(Win-2K)
 - Thunderbird latest-0.9 nightly 2004/11/15 build(Win-2K)

Reproducible: Always
Steps to Reproduce:

Comment 1

[WADA:World Anti-bad-Duping Agency]

When Thunderbird trunk 2007/04/13, new X-Mozilla-Keys: header was not removed too.
Changing summary.  

Comment 2

[WADA:World Anti-bad-Duping Agency]

X-Identity-Key: was not removed too, if attached mail is a mail in Drafts folder.
X-Identity-Key: case is not said "bug", but all internal headers is better to be removed from message/rfc822 part.

Comment 3

[Tim Gokcen]

I am presently experiencing this issue in Icedove (Debian Thunderbird) 2.0.0.19

Comment 4

[casmls]

Forwarded emails are transported inline by default since Thunderbird 3.0 [1][2], so this problem does not occur by default anymore, at least not via this vector, but there is another vector for this to happen:

In cases where a MDN (return recipient) is requested and honoured the return recipient will also disclose these header fields:
- X-Account-Key
- X-UIDL
- X-Mozilla-Keys
- ..?

Tested on Thunderbird 3.1.10.

[1] http://kb.mozillazine.org/Thunderbird_3.0_-_New_Features_and_Changes#Forwarding_and_Message_Attachments
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=230448